RHEL 9 must restrict privilege elevation to authorized personnel.
An XCCDF Rule
Description
<VulnDiscussion>If the "sudoers" file is not configured correctly, any user defined on the system can initiate privileged actions on the target system.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-258087r991589_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
Remove the following entries from the /etc/sudoers file or configuration file under /etc/sudoers.d/:
ALL ALL=(ALL) ALL
ALL ALL=(ALL:ALL) ALL