Detections
Analytics

1.130 ALMA-09-017400

Information

AlmaLinux OS 9 must use the invoking user's password for privilege escalation when using "sudo".

GROUP ID: V-269233
RULE ID: SV-269233r1050115

If the rootpw, targetpw, or runaspw flags are defined and not disabled, by default the operating system will prompt the invoking user for the "root" user password.

Solution

Define the following in the Defaults section of the /etc/sudoers file or a single configuration file in the /etc/sudoers.d/ directory:

Defaults !targetpw
Defaults !rootpw
Defaults !runaspw

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-269233r1050115_rule, STIG-ID|ALMA-09-017400, Vuln-ID|V-269233

Plugin: Unix

Control ID: 4aa2014b1b28a423a27d12d4012ef0d896af76fe1644f0e0b7a4c6d6e48a4817