Detections
Analytics
RHEL-08-010382 - RHEL 8 must restrict privilege elevation to authorized personnel.
Information
The sudo command allows a user to execute programs with elevated (administrator) privileges. It prompts the user for their password and confirms your request to execute a command by checking a file, called sudoers. If the "sudoers" file is not configured correctly, any user defined on the system can initiate privileged actions on the target system.Solution
Remove the following entries from the sudoers file:ALL ALL=(ALL) ALL
ALL ALL=(ALL:ALL) ALL
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_RHEL_8_V2R8_STIG.zip
Item Details
Audit Name: DISA Red Hat Enterprise Linux 8 STIG v2r8
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-237641r1101904_rule, STIG-ID|RHEL-08-010382, Vuln-ID|V-237641
Plugin: Unix
Control ID: 3e24a1ff504e2d155b15d3fba45d3afb0df47fb538829ff3257578802e00f645