Detections
Analytics

1.21 AZLX-23-001010

Information

Amazon Linux 2023 must require reauthentication when using the "sudo" command.

GROUP ID: V-274014RULE ID: SV-274014r1120030

Without reauthentication, users may access resources or perform tasks for which they do not have authorization.

Solution

Configure Amazon Linux 2023 to reauthenticate "sudo" commands after the specified timeout:

Add the following line to "/etc/sudoers" or a file in "/etc/sudoers.d":

Defaults timestamp_timeout=0

See Also

https://workbench.cisecurity.org/benchmarks/26107

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-11, CAT|II, CCI|CCI-002038, Rule-ID|SV-274014r1120030_rule, STIG-ID|AZLX-23-001010, Vuln-ID|V-274014

Plugin: Unix

Control ID: 51e935b6905d5263eec1ca34a71f830573c60125a9229f29926c1dfc45ec17db