Detections
Analytics
ALMA-09-017290 - AlmaLinux OS 9 must restrict privilege elevation to authorized personnel.
Information
If the "sudoers" file is not configured correctly, any user defined on the system can initiate privileged actions on the target system.Solution
Remove the following entries from the /etc/sudoers file or configuration files under /etc/sudoers.d/ (including NOPASSWD equivalents):ALL ALL=(ALL) ALL
ALL ALL=(ALL:ALL) ALL
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_CL_AlmaLinux_OS_9_V1R6_STIG.zip
Item Details
Audit Name: DISA Cloud Linux AlmaLinux OS 9 STIG v1r6
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-269232r1101826_rule, STIG-ID|ALMA-09-017290, Vuln-ID|V-269232
Plugin: Unix
Control ID: 4959e2a4c6d8f96dc73746dd184897202075fc18b6045d6ef0fe919e2a1f73f2