SV-261373r1050789_rule
V-261373
SRG-OS-000373-GPOS-00156
SLEM-05-432015
CAT II
10
Configure SLEM 5 to remove any occurrence of "NOPASSWD" or "!authenticate" found in the "/etc/sudoers" file. If the system does not use passwords for authentication, the "NOPASSWD" tag may exist in the file.
Verify that SLEM 5 requires reauthentication when changing authenticators, roles, or escalating privileges with the following command:
> sudo egrep -i '(nopasswd|!authenticate)' /etc/sudoers
If any uncommented lines containing "!authenticate", or "NOPASSWD" are returned and active accounts on the system have valid passwords, this is a finding.
V-261373
False
SLEM-05-432015
Verify that SLEM 5 requires reauthentication when changing authenticators, roles, or escalating privileges with the following command:
> sudo egrep -i '(nopasswd|!authenticate)' /etc/sudoers
If any uncommented lines containing "!authenticate", or "NOPASSWD" are returned and active accounts on the system have valid passwords, this is a finding.
M
5596