STIGQter: STIG Summary: Oracle Linux 8 Security Technical Implementation Guide Version: 2 Release: 9 Benchmark Date: 01 Jul 2026:

OL 8 must specify the default "include" directory for the /etc/sudoers file.

DISA Rule

SV-252655r991589_rule

Vulnerability Number

V-252655

Group Title

SRG-OS-000480-GPOS-00227

Rule Version

OL08-00-010379

Severity

CAT II

CCI(s)

CCI-000366 - Implement the security configuration settings.

Weight

Fix Recommendation

Configure the /etc/sudoers file to only include the /etc/sudoers.d directory.

Edit the /etc/sudoers file with the following command:

$ sudo visudo

Add or modify the following line:
#includedir /etc/sudoers.d

Check Contents

Note: If the "include" and "includedir" directives are not present in the /etc/sudoers file, this requirement is not applicable.

Verify the operating system specifies only the default "include" directory for the /etc/sudoers file with the following command:

$ sudo grep include /etc/sudoers

#includedir /etc/sudoers.d

If the results are not "/etc/sudoers.d" or additional files or directories are specified, this is a finding.

Verify the operating system does not have nested "include" files or directories within the /etc/sudoers.d directory with the following command:

$ sudo grep -Er include /etc/sudoers.d

If results are returned, this is a finding.

Vulnerability Number

V-252655

Documentable

False

Rule Version

OL08-00-010379

Severity Override Guidance

Check Content Reference

Target Key

5416