Detections
Analytics

1.276 RHEL-10-600520

Information

RHEL 10 must restrict privilege elevation to authorized personnel.

GROUP ID: V-281207RULE ID: SV-281207r1166573

If the "sudoers" file is not configured correctly, any user defined on the system can initiate privileged actions on the target system.

Solution

Configure RHEL 10 to restrict privilege elevation to authorized personnel.

Remove the following entries from the "/etc/sudoers" file or configuration file under "/etc/sudoers.d/":

ALL ALL=(ALL) ALLALL ALL=(ALL:ALL) ALL

See Also

https://workbench.cisecurity.org/benchmarks/26403

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-6a., CAT|II, CCI|CCI-002696, Rule-ID|SV-281207r1166573_rule, STIG-ID|RHEL-10-600520, Vuln-ID|V-281207

Plugin: Unix

Control ID: 41726bdca4c639da00612ac90b040ad533845c9e92dd0a23252c17f7e5213276