An XCCDF Group - A logical subset of the XCCDF Benchmark
Sudo
root
NOEXEC
/etc/sudoers
/etc/sudoers.d/
requiretty
use_pty
!authenticate
NOPASSWD
vdsm
sudoers
ALL
sudo
$ apt-get install sudo
/etc/sudoers.d
$ sudo chgrp root /etc/sudoers.d
$ sudo chown root /etc/sudoers.d
$ sudo chmod 0750 /etc/sudoers.d
$ sudo chgrp root /etc/sudoers
$ sudo chown root /etc/sudoers
$ sudo chmod 0440 /etc/sudoers
/usr/bin/sudo
$ sudo chmod 4111 /usr/bin/sudo
env_reset
ignore_dot
umask
umask=