CCI|CCI-002227

Title

The organization restricts privileged accounts on the information system to organization-defined personnel or roles.

Reference Item Details

Reference: CCI - DISA Control Correlation Identifier

Category: 2013

Audit Items

View all Reference Audit Items

Name	Plugin	Audit Name
5.2.8 Ensure users password required for privilege escalation when using sudo - rootpw	Unix	CIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
5.2.8 Ensure users password required for privilege escalation when using sudo - runaspw	Unix	CIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
5.2.8 Ensure users password required for privilege escalation when using sudo - targetpw	Unix	CIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
OL6-00-000536 - The Oracle Linux operating system must use the invoking user's password for privilege escalation when using 'sudo' - rootpw	Unix	DISA STIG Oracle Linux 6 v2r7
OL6-00-000536 - The Oracle Linux operating system must use the invoking user's password for privilege escalation when using 'sudo' - runaspw	Unix	DISA STIG Oracle Linux 6 v2r7
OL6-00-000536 - The Oracle Linux operating system must use the invoking user's password for privilege escalation when using 'sudo' - targetpw	Unix	DISA STIG Oracle Linux 6 v2r7
OL07-00-010342 - The Oracle Linux operating system must use the invoking user's password for privilege escalation when using 'sudo'.	Unix	DISA Oracle Linux 7 STIG v2r14
RHEL-07-010342 - The Red Hat Enterprise Linux operating system must use the invoking user's password for privilege escalation when using 'sudo'.	Unix	DISA Red Hat Enterprise Linux 7 STIG v3r14
RHEL-08-010383 - RHEL 8 must use the invoking user's password for privilege escalation when using 'sudo'.	Unix	DISA Red Hat Enterprise Linux 8 STIG v1r13
SLES-12-010112 - The SUSE operating system must use the invoking user's password for privilege escalation when using 'sudo'.	Unix	DISA SLES 12 STIG v2r13
WPAW-00-000400 - Administrative accounts of all high-value IT resources must be assigned to a specific administrative tier in Active Directory to separate highly privileged administrative accounts from less privileged administrative accounts.	Windows	DISA MS Windows Privileged Access Workstation v2r3