SV-261374r1050789_rule
V-261374
SRG-OS-000373-GPOS-00156
SLEM-05-432020
CAT II
10
Configure the "sudo" command to require reauthentication.
Add or modify the following line in the "/etc/sudoers" file:
Defaults timestamp_timeout=<value>
Note: The "<value>" must be a number that is greater than or equal to "0".
Verify SLEM 5 requires reauthentication when using the "sudo" command to elevate privileges with the following command:
> sudo grep -ir 'timestamp_timeout' /etc/sudoers /etc/sudoers.d
/etc/sudoers:Defaults timestamp_timeout=0
If "timestamp_timeout" is set to a negative number, is commented out, conflicting results are returned, or no results are returned, this is a finding.
V-261374
False
SLEM-05-432020
Verify SLEM 5 requires reauthentication when using the "sudo" command to elevate privileges with the following command:
> sudo grep -ir 'timestamp_timeout' /etc/sudoers /etc/sudoers.d
/etc/sudoers:Defaults timestamp_timeout=0
If "timestamp_timeout" is set to a negative number, is commented out, conflicting results are returned, or no results are returned, this is a finding.
M
5596