STIGQter: STIG Summary: Canonical Ubuntu 20.04 LTS Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 10 Mar 2021:

The Ubuntu operating system must require users to reauthenticate for privilege escalation or when changing roles.

DISA Rule

SV-238208r653799_rule

Vulnerability Number

V-238208

Group Title

SRG-OS-000373-GPOS-00156

Rule Version

UBTU-20-010014

Severity

CAT II

CCI(s)

• CCI-002038 - The organization requires users to reauthenticate upon organization-defined circumstances or situations requiring reauthentication.

Weight

10

Fix Recommendation

Remove any occurrence of "NOPASSWD" or "!authenticate" found in "/etc/sudoers" file or files in the "/etc/sudoers.d" directory.

Check Contents

Verify the "/etc/sudoers" file has no occurrences of "NOPASSWD" or "!authenticate" by running the following command:

$ sudo egrep -i '(nopasswd|!authenticate)' /etc/sudoers /etc/sudoers.d/*

If any occurrences of "NOPASSWD" or "!authenticate" return from the command, this is a finding.

Vulnerability Number

V-238208

Documentable

False

Rule Version

UBTU-20-010014

Severity Override Guidance

Verify the "/etc/sudoers" file has no occurrences of "NOPASSWD" or "!authenticate" by running the following command:

$ sudo egrep -i '(nopasswd|!authenticate)' /etc/sudoers /etc/sudoers.d/*

If any occurrences of "NOPASSWD" or "!authenticate" return from the command, this is a finding.

Check Content Reference

M

Target Key

5318

Comments