← Back to Red Hat Enterprise Linux 10 Security Technical Implementation Guide

V-281207

CAT II (Medium)

RHEL 10 must restrict privilege elevation to authorized personnel.

Rule ID

SV-281207r1166573_rule

STIG

Red Hat Enterprise Linux 10 Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-002696

Discussion

If the "sudoers" file is not configured correctly, any user defined on the system can initiate privileged actions on the target system.

Check Content

Verify RHEL 10 restricts privilege elevation to authorized personnel with the following command:

$ sudo grep -riw ALL /etc/sudoers /etc/sudoers.d/ | grep -v "#"

If the either of the following entries is returned, this is a finding:

ALL     ALL=(ALL) ALL
ALL     ALL=(ALL:ALL) ALL

Fix Text

Configure RHEL 10 to restrict privilege elevation to authorized personnel.

Remove the following entries from the "/etc/sudoers" file or configuration file under "/etc/sudoers.d/":

ALL     ALL=(ALL) ALL
ALL     ALL=(ALL:ALL) ALL