SV-248583r1101874_rule
V-248583
SRG-OS-000480-GPOS-00227
OL08-00-010382
CAT II
10
Remove the following entries from the sudoers file:
ALL ALL=(ALL) ALL
ALL ALL=(ALL:ALL) ALL
Verify the "sudoers" file restricts sudo access to authorized personnel.
$ sudo grep -iwR 'ALL' /etc/sudoers /etc/sudoers.d/ | grep -v '#'
If the either of the following entries are returned, this is a finding:
ALL ALL=(ALL) ALL
ALL ALL=(ALL:ALL) ALL
V-248583
False
OL08-00-010382
Verify the "sudoers" file restricts sudo access to authorized personnel.
$ sudo grep -iwR 'ALL' /etc/sudoers /etc/sudoers.d/ | grep -v '#'
If the either of the following entries are returned, this is a finding:
ALL ALL=(ALL) ALL
ALL ALL=(ALL:ALL) ALL
M
5416