Detections
Analytics
1.68 OL08-00-010382
Information
OL 8 must restrict privilege elevation to authorized personnel.GROUP ID: V-248583
RULE ID: SV-248583r991589
The sudo command allows a user to execute programs with elevated (administrator) privileges. It prompts the user for their password and confirms your request to execute a command by checking a file, called sudoers. If the "sudoers" file is not configured correctly, any user defined on the system can initiate privileged actions on the target system.
Solution
Remove the following entries from the sudoers file:ALL ALL=(ALL) ALL
ALL ALL=(ALL:ALL) ALL
See Also
Item Details
Audit Name: CIS Oracle Linux 8 STIG v1.0.0 CAT II
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-248583r991589_rule, STIG-ID|OL08-00-010382, Vuln-ID|V-248583
Plugin: Unix
Control ID: 362ac94e7b3a366eedfa441a841e9327a80a7b9640a2842c1617e68d62913afe