Rule explorer
Browse every hardening rule in the catalogue. Filter by platform, severity, profile level and whether the check can be automated.
74 rules foundof 11,219Page 1 of 3
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-PGSQL-NO-TRUST-AUTH | Ensure pg_hba.conf does not use 'trust' or 'password' authenticationpostgres · Level 1 | postgres | Critical | 1 | Automated |
| TMA-POSTGRES-1.4 | Ensure Data Cluster Initialized Successfullypostgres · Level 1 | postgres | High | 1 | Automated |
| TMA-POSTGRES-1.5 | Ensure the Latest Security Patches are Appliedpostgres · Level 1 | postgres | High | 1 | Manual review |
| TMA-POSTGRES-2.2 | Ensure extension directory has appropriate ownership and permissionspostgres · Level 1 | postgres | High | 1 | Automated |
| TMA-POSTGRES-3.2 | Ensure the PostgreSQL Audit Extension (pgAudit) is enabledpostgres · Level 1 | postgres | High | 1 | Automated |
| TMA-POSTGRES-4.3 | Ensure excessive administrative privileges are revokedpostgres · Level 1 | postgres | High | 1 | Manual review |
| TMA-POSTGRES-4.10 | Ensure all accounts that can log in have passwordspostgres · Level 1 | postgres | High | 1 | Manual review |
| TMA-POSTGRES-5.3 | Ensure login via "local" UNIX Domain Socket is configured correctlypostgres · Level 1 | postgres | High | 1 | Manual review |
| TMA-POSTGRES-5.4 | Ensure login via "host" TCP/IP Socket is configured correctlypostgres · Level 1 | postgres | High | 1 | Manual review |
| TMA-POSTGRES-6.8 | Ensure TLS is enabled and configured correctlypostgres · Level 1 | postgres | High | 1 | Automated |
| TMA-POSTGRES-6.9 | Ensure the TLSv1.0 and TLSv1.1 Protocols are Disabledpostgres · Level 1 | postgres | High | 1 | Automated |
| TMA-PGSQL-PASSWORD-ENCRYPTION | Ensure 'password_encryption' is set to 'scram-sha-256'postgres · Level 1 | postgres | Medium | 1 | Automated |
| TMA-POSTGRES-1.1 | Ensure packages are obtained from authorized repositoriespostgres · Level 1 | postgres | Medium | 1 | Manual review |
| TMA-POSTGRES-1.6 | Verify That 'PGPASSWORD' is Not Set in Users' Profilespostgres · Level 1 | postgres | Medium | 1 | Automated |
| TMA-POSTGRES-1.7 | Verify That the 'PGPASSWORD' Environment Variable is Not in Usepostgres · Level 1 | postgres | Medium | 1 | Automated |
| TMA-POSTGRES-2.1 | Ensure the file permissions mask is correctpostgres · Level 1 | postgres | Medium | 1 | Manual review |
| TMA-POSTGRES-2.4 | Ensure Passwords are Not Stored in the service filepostgres · Level 1 | postgres | Medium | 1 | Manual review |
| TMA-POSTGRES-3.1.3 | Ensure the logging collector is enabledpostgres · Level 1 | postgres | Medium | 1 | Automated |
| TMA-POSTGRES-3.1.6 | Ensure the log file permissions are set correctlypostgres · Level 1 | postgres | Medium | 1 | Automated |
| TMA-POSTGRES-3.1.14 | Ensure the correct messages are written to the server logpostgres · Level 1 | postgres | Medium | 1 | Automated |
| TMA-POSTGRES-3.1.15 | Ensure the correct SQL statements generating errors are recordedpostgres · Level 1 | postgres | Medium | 1 | Automated |
| TMA-POSTGRES-3.1.20 | Ensure 'log_connections' is enabledpostgres · Level 1 | postgres | Medium | 1 | Automated |
| TMA-POSTGRES-3.1.21 | Ensure 'log_disconnections' is enabledpostgres · Level 1 | postgres | Medium | 1 | Automated |
| TMA-POSTGRES-3.1.24 | Ensure 'log_line_prefix' is set correctlypostgres · Level 1 | postgres | Medium | 1 | Automated |
| TMA-POSTGRES-3.1.25 | Ensure 'log_statement' is set correctlypostgres · Level 1 | postgres | Medium | 1 | Automated |