Detections
Analytics
ALMA-09-032250 - AlmaLinux OS 9 must require reauthentication when using the "sudo" command.
Information
Without re-authentication, users may access resources or perform tasks for which they do not have authorization.When operating systems provide the capability to escalate a functional capability, it is critical the user re-authenticate.
Solution
Configure AlmaLinux OS 9 to reauthenticate "sudo" commands after the specified timeout:Add the following line to "/etc/sudoers" or a file within "/etc/sudoers.d/":
Defaults timestamp_timeout=0
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_CL_AlmaLinux_OS_9_V1R6_STIG.zip
Item Details
Audit Name: DISA Cloud Linux AlmaLinux OS 9 STIG v1r6
Category: ACCESS CONTROL
References: 800-53|AC-6(9), CAT|II, CCI|CCI-002234, Rule-ID|SV-269362r1050245_rule, STIG-ID|ALMA-09-032250, Vuln-ID|V-269362
Plugin: Unix
Control ID: 341e9fb2436c9e48699dd73de1c8cb6d17a7d9935637430e424e7bdf7e482ea5