AlmaLinux OS 9 must require reauthentication when using the "sudo" command.
An XCCDF Rule
Description
Without re-authentication, users may access resources or perform tasks for which they do not have authorization. When operating systems provide the capability to escalate a functional capability, it is critical the user re-authenticate.
- ID
- SV-269362r1050245_rule
- Version
- ALMA-09-032250
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Configure AlmaLinux OS 9 to reauthenticate "sudo" commands after the specified timeout:
Add the following line to "/etc/sudoers" or a file within "/etc/sudoers.d/":
Defaults timestamp_timeout=0