Skip to content
ATO Pathways
Log In
Overview
Search
Catalogs
SCAP
OSCAL
Catalogs
Profiles
Documents
References
Knowledge Base
Platform Documentation
Compliance Dictionary
Platform Changelog
About
Catalogs
XCCDF
Guide to the Secure Configuration of Alibaba Cloud Linux 3
System Settings
Installing and Maintaining Software
Sudo
Ensure Users Re-Authenticate for Privilege Escalation - sudo NOPASSWD
Ensure Users Re-Authenticate for Privilege Escalation - sudo NOPASSWD
An XCCDF Rule
Details
Profiles
Prose
Ensure Users Re-Authenticate for Privilege Escalation - sudo NOPASSWD
Medium Severity
The sudo
NOPASSWD
tag, when specified, allows a user to execute commands using sudo without having to authenticate. This should be disabled by making sure that the
NOPASSWD
tag does not exist in
/etc/sudoers
configuration file or any sudo configuration snippets in
/etc/sudoers.d/
.