Skip to content

SLEM 5 must restrict privilege elevation to authorized personnel.

An XCCDF Rule

Description

The sudo command allows a user to execute programs with elevated (administrator) privileges. It prompts the user for their password and confirms the request to execute a command by checking a file, called sudoers. If the "sudoers" file is not configured correctly, any user defined on the system can initiate privileged actions on the target system.

ID
SV-261375r996562_rule
Version
SLEM-05-432025
Severity
Medium
References
Updated

Remediation Templates

A Manual Procedure

Remove the following entries from the "/etc/sudoers" file:

ALL     ALL=(ALL) ALL
ALL     ALL=(ALL:ALL) ALL