Detections
Analytics

1.23 AZLX-23-001020

Information

Amazon Linux 2023 must require users to provide a password for privilege escalation.

GROUP ID: V-274016RULE ID: SV-274016r1120036

Without reauthentication, users may access resources or perform tasks for which they do not have authorization.

Solution

Configure Amazon Linux 2023 to not allow users to execute privileged actions without authenticating with a password.

Remove any occurrence of "NOPASSWD" found in "/etc/sudoers" file or files in the "/etc/sudoers.d" directory.

$ sudo sed -i '/NOPASSWD/ s/^/# /g' /etc/sudoers /etc/sudoers.d/*

See Also

https://workbench.cisecurity.org/benchmarks/26107

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-274016r1120036_rule, STIG-ID|AZLX-23-001020, Vuln-ID|V-274016

Plugin: Unix

Control ID: d4dbd65a7b60544ad288f70bc60856db80c3c3dcae0abff6619159c47a90e15d