We have deployed splunk enterprise on huawei cloud. After conducting baseline checking, we have discovered several risk items targeting mongodb with the following:
Rule:Use a Secure TLS Version
Rule:Disable Listening on the Unix Socket
Rule:Set the Background Startup Mode
Rule:Disable the HTTP Status Interface
Rule:Configure bind_ip
Rule:Disable Internal Command Test
Rule:Do Not Omit Server Name Verification
Rule:Enable the Log Appending Mode
Rule:Restrict the Permission on the Home Directory of MongoDB
Rule:Restrict the Permission on the Bin Directory of MongoDB
Rule:Check the FIPS Mode Option
I have checked if there is any related documentation but I cannot find any of them. I am wondering if I should create a mongodb.conf for it. Thanksss
