STIGQter: STIG Summary: SUSE Linux Enterprise Server 15 Security Technical Implementation Guide Version: 2 Release: 8 Benchmark Date: 01 Jul 2026:

The SUSE operating system must specify the default "include" directory for the /etc/sudoers file.

DISA Rule

SV-251723r991589_rule

Vulnerability Number

V-251723

Group Title

SRG-OS-000480-GPOS-00227

Rule Version

SLES-15-020099

Severity

CAT II

CCI(s)

CCI-000366 - Implement the security configuration settings.

Weight

Fix Recommendation

Configure the /etc/sudoers file to only include the /etc/sudoers.d directory.

Edit the /etc/sudoers file with the following command:

> sudo visudo

Add or modify the following line:
@includedir /etc/sudoers.d

Check Contents

Note: If the "include" and "includedir" directives are not present in the /etc/sudoers file, this requirement is not applicable.

Verify the operating system specifies only the default "include" directory for the /etc/sudoers file with the following command:

> sudo grep include /etc/sudoers

@includedir /etc/sudoers.d

If the results are not "/etc/sudoers.d" or additional files or directories are specified, this is a finding.

Verify the operating system does not have nested "include" files or directories within the /etc/sudoers.d directory with the following command:

> sudo grep -r include /etc/sudoers.d

If results are returned, this is a finding.

Vulnerability Number

V-251723

Documentable

False

Rule Version

SLES-15-020099

Severity Override Guidance

Check Content Reference

Target Key

5274