Install sudo Package
An XCCDF Rule
Description
The sudo
package can be installed with the following command:
$ sudo yum install sudo
Rationale
sudo
is a program designed to allow a system administrator to give
limited root privileges to users and log root activity. The basic philosophy
is to give as few privileges as possible but still allow system users to
get their work done.
- ID
- xccdf_org.ssgproject.content_rule_package_sudo_installed
- Severity
- Medium
- References
- Updated
Remediation - Anaconda Pre-Install Instructions
package --add=sudo
Remediation - OS Build Blueprint
[[packages]]
name = "sudo"
version = "*"
Remediation - Ansible
- name: Ensure sudo is installed
package:
name: sudo
state: present
when: ansible_virtualization_type not in ["docker", "lxc", "openvz", "podman", "container"]
tags:
Remediation - Puppet
include install_sudo
class install_sudo {
package { 'sudo':
ensure => 'installed',
}
Remediation - Shell Script
# Remediation is applicable only in certain platforms
if [ ! -f /.dockerenv ] && [ ! -f /run/.containerenv ]; then
if ! rpm -q --quiet "sudo" ; then
yum install -y "sudo"
fi