Detections
Analytics
RHEL-10-600550 - RHEL 10 must use the invoking user's password for privilege escalation when using "sudo".
Information
If the "rootpw", "targetpw", or "runaspw" flags are defined and not disabled, by default the operating system will prompt the invoking user for the "root" user password.Solution
Configure RHEL 10 to use the invoking user's password for privilege escalation when using "sudo".Define the following in the Defaults section of the /etc/sudoers file or a single configuration file in the /etc/sudoers.d/ directory:
Defaults !targetpw
Defaults !rootpw
Defaults !runaspw
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_RHEL_10_V1R1_STIG.zip
Item Details
Audit Name: DISA Red Hat Enterprise Linux 10 STIG v1r1
Category: IDENTIFICATION AND AUTHENTICATION
References: 800-53|IA-11, CAT|II, CCI|CCI-002038, Rule-ID|SV-281210r1166582_rule, STIG-ID|RHEL-10-600550, Vuln-ID|V-281210
Plugin: Unix
Control ID: 34d0e047dfb14b27c7ac40be80c6f7b4c5cdf67921d672fe2d38e4d38bfd97ef