Detections
Analytics

1.286 OL09-00-002362

Information

OL 9 must require users to reauthenticate for privilege escalation.

GROUP ID: V-271724
RULE ID: SV-271724r1091884

Without reauthentication, users may access resources or perform tasks for which they do not have authorization.

When operating systems provide the capability to escalate a functional capability, it is critical that the user reauthenticate.

Solution

Configure OL 9 to not allow users to execute privileged actions without authenticating.

Remove any occurrence of "!authenticate" found in "/etc/sudoers" file or files in the "/etc/sudoers.d" directory.

$ sudo sed -i '/\!authenticate/ s/^/# /g' /etc/sudoers /etc/sudoers.d/*

See Also

https://workbench.cisecurity.org/benchmarks/27024

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6(9), CCI|CCI-002234, Rule-ID|SV-271724r1091884_rule, STIG-ID|OL09-00-002362, Vuln-ID|V-271724

Plugin: Unix

Control ID: 37c6a8dbbe7712fdd8bab3d74d4cdf008fdfb5dd7f2ba1eac5de8301e16d373d