Detections
Analytics

1.44 OL09-00-000231

Information

OL 9 must use the invoking user's password for privilege escalation when using sudo.

GROUP ID: V-271475
RULE ID: SV-271475r1091137

If the rootpw, targetpw, or runaspw flags are defined and not disabled, by default the operating system will prompt the invoking user for the "root" user password.

Solution

Configure OL 9 to use the invoking user's password for privilege escalation when using sudo.

Define the following in the Defaults section of the /etc/sudoers file or a single configuration file in the /etc/sudoers.d/ directory:

Defaults !targetpw
Defaults !rootpw
Defaults !runaspw

See Also

https://workbench.cisecurity.org/benchmarks/27024

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-271475r1091137_rule, STIG-ID|OL09-00-000231, Vuln-ID|V-271475

Plugin: Unix

Control ID: 37757cafc7efab451db7cbbd6658406d87ed0d9f93d3e1850bff57184fa266c6