Detections
Analytics

1.279 RHEL-10-600550

Information

RHEL 10 must use the invoking user's password for privilege escalation when using "sudo".

GROUP ID: V-281210
RULE ID: SV-281210r1166582

If the "rootpw", "targetpw", or "runaspw" flags are defined and not disabled, by default the operating system will prompt the invoking user for the "root" user password.

Solution

Configure RHEL 10 to use the invoking user's password for privilege escalation when using "sudo".

Define the following in the Defaults section of the /etc/sudoers file or a single configuration file in the /etc/sudoers.d/ directory:

Defaults !targetpwDefaults !rootpwDefaults !runaspw

See Also

https://workbench.cisecurity.org/benchmarks/26403

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-11, CAT|II, CCI|CCI-002038, Rule-ID|SV-281210r1166582_rule, STIG-ID|RHEL-10-600550, Vuln-ID|V-281210

Plugin: Unix

Control ID: bd5b521b74e209e7438f663af6b273d4bde5fc5fc102316bd980fdac3abee4a5