Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
31 rules foundof 11,219Page 1 of 2
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-COCKROACHDB-1.3 | Ensure CockroachDB Cluster is Initialized Securely with TLScockroachdb · Level 1 | cockroachdb | Critical | 1 | Manual review |
| TMA-COCKROACHDB-1.4 | Do Not Use the --insecure Flag in Production Environments Under Any Circumstancescockroachdb · Level 1 | cockroachdb | Critical | 1 | Automated |
| TMA-COCKROACHDB-4.3 | Secure the root User and Administrative Rolescockroachdb · Level 1 | cockroachdb | Critical | 1 | Manual review |
| TMA-COCKROACHDB-1.7 | Ensure Encryption at Rest Keys Are Managed by an External KMS and Retrieved at Startupcockroachdb · Level 1 | cockroachdb | High | 1 | Manual review |
| TMA-COCKROACHDB-2.1 | Ensure Network Time Protocol (NTP) Service Is Configured for Cluster Clock Synchronizationcockroachdb · Level 1 | cockroachdb | High | 1 | Manual review |
| TMA-COCKROACHDB-2.3 | Do Not Grant Sudo Privileges to the CockroachDB Process Usercockroachdb · Level 1 | cockroachdb | High | 1 | Automated |
| TMA-COCKROACHDB-2.4 | Ensure Database Servers Are Isolated in a Separate Subnet with Restricted Ingress and Egresscockroachdb · Level 1 | cockroachdb | High | 1 | Manual review |
| TMA-COCKROACHDB-3.1 | Ensure CockroachDB Logging Is Enabled and Logs Are Securely Storedcockroachdb · Level 1 | cockroachdb | High | 1 | Manual review |
| TMA-COCKROACHDB-3.3 | Ensure Connection Authentication Logging Is Enabledcockroachdb · Level 1 | cockroachdb | High | 1 | Automated |
| TMA-COCKROACHDB-4.1 | Restrict Access Using Host-Based Authenticationcockroachdb · Level 1 | cockroachdb | High | 1 | Manual review |
| TMA-COCKROACHDB-4.2 | Restrict and Secure Password Authenticationcockroachdb · Level 1 | cockroachdb | High | 1 | Manual review |
| TMA-COCKROACHDB-5.1 | Ensure Backups Are Encrypted Using an External Methodcockroachdb · Level 1 | cockroachdb | High | 1 | Manual review |
| TMA-COCKROACHDB-6.1 | Ensure Certificate File Permissions and Validitycockroachdb · Level 1 | cockroachdb | High | 1 | Automated |
| TMA-COCKROACHDB-6.3 | Ensure remote connections via TCP/IP sockets are configured correctlycockroachdb · Level 1 | cockroachdb | High | 1 | Manual review |
| TMA-COCKROACHDB-6.4 | Ensure Security Audit Logging Is Enabledcockroachdb · Level 1 | cockroachdb | High | 1 | Automated |
| TMA-COCKROACHDB-1.1 | Obtain the binary from an official and trusted source and verify the SHA-256 sum after downloadingcockroachdb · Level 1 | cockroachdb | Medium | 1 | Manual review |
| TMA-COCKROACHDB-1.5 | Ensure All Cluster Nodes Are Running the Exact Same Version, Including the Patch Release Numbercockroachdb · Level 1 | cockroachdb | Medium | 1 | Manual review |
| TMA-COCKROACHDB-1.6 | Establish a Process for Rolling Upgrades to Apply Security Patches Without Downtimecockroachdb · Level 1 | cockroachdb | Medium | 1 | Manual review |
| TMA-COCKROACHDB-2.2 | Ensure Each CockroachDB Node Runs as a Dedicated Process on a Separate Hostcockroachdb · Level 1 | cockroachdb | Medium | 1 | Automated |
| TMA-COCKROACHDB-2.5 | Disable Linux Memory Swapping to Prevent Performance and Stability Issuescockroachdb · Level 1 | cockroachdb | Medium | 1 | Automated |
| TMA-COCKROACHDB-2.7 | Set the File Descriptor Limit to at Least 15,000 to Accommodate Cluster Growthcockroachdb · Level 1 | cockroachdb | Medium | 1 | Automated |
| TMA-COCKROACHDB-3.2 | Ensure Log Rotation and Retention Settings Are Configuredcockroachdb · Level 1 | cockroachdb | Medium | 1 | Manual review |
| TMA-COCKROACHDB-3.4 | Ensure Database Monitoring and Alerting Are in Placecockroachdb · Level 1 | cockroachdb | Medium | 1 | Manual review |
| TMA-COCKROACHDB-4.4 | Centralize and Standardize User Managementcockroachdb · Level 1 | cockroachdb | Medium | 1 | Manual review |
| TMA-COCKROACHDB-5.2 | Periodically Test Backup Recovery Procedurescockroachdb · Level 1 | cockroachdb | Medium | 1 | Manual review |