Detections
Analytics

1.22 AZLX-23-001015

Information

Amazon Linux 2023 must require users to reauthenticate for privilege escalation.

GROUP ID: V-274015RULE ID: SV-274015r1120033

Without reauthentication, users may access resources or perform tasks for which they do not have authorization.

Solution

Configure Amazon Linux 2023 to not allow users to execute privileged actions without authenticating.

Remove any occurrence of "!authenticate" found in "/etc/sudoers" file or files in the "/etc/sudoers.d" directory.

$ sudo sed -i '/\!authenticate/ s/^/# /g' /etc/sudoers /etc/sudoers.d/*

See Also

https://workbench.cisecurity.org/benchmarks/26107

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-11, CAT|II, CCI|CCI-002038, Rule-ID|SV-274015r1120033_rule, STIG-ID|AZLX-23-001015, Vuln-ID|V-274015

Plugin: Unix

Control ID: d60707e48720c9148ff7eec39388026087ba815e5014a3b15d2e4ff083b26183