Detections
Analytics

1.129 ALMA-09-017290

Information

AlmaLinux OS 9 must restrict privilege elevation to authorized personnel.

GROUP ID: V-269232
RULE ID: SV-269232r1101826

If the "sudoers" file is not configured correctly, any user defined on the system can initiate privileged actions on the target system.

Solution

Remove the following entries from the /etc/sudoers file or configuration files under /etc/sudoers.d/ (including NOPASSWD equivalents):

ALL ALL=(ALL) ALL
ALL ALL=(ALL:ALL) ALL

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-269232r1101826_rule, STIG-ID|ALMA-09-017290, Vuln-ID|V-269232

Plugin: Unix

Control ID: d9f0291c81d178fea7f3ea8e9139f0b62ccc0423d10f99212c38044fbb30b32d