The Oracle Linux operating system must restrict privilege elevation to authorized personnel.
An XCCDF Rule
Description
The sudo command allows a user to execute programs with elevated (administrator) privileges. It prompts the user for their password and confirms your request to execute a command by checking a file, called sudoers. If the "sudoers" file is not configured correctly, any user defined on the system can initiate privileged actions on the target system.
- ID
- SV-237627r991589_rule
- Version
- OL07-00-010341
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Remove the following entries from the sudoers file:
ALL ALL=(ALL) ALL
ALL ALL=(ALL:ALL) ALL