SV-261375r996562_rule
V-261375
SRG-OS-000480-GPOS-00227
SLEM-05-432025
CAT II
10
Remove the following entries from the "/etc/sudoers" file:
ALL ALL=(ALL) ALL
ALL ALL=(ALL:ALL) ALL
Verify the "sudoers" file restricts sudo access to authorized personnel with the following command:
> sudo grep -iw 'ALL' /etc/sudoers /etc/sudoers.d/*
root ALL=(ALL) ALL
If "ALL ALL=(ALL) ALL" or "ALL ALL=(ALL:ALL) ALL" entries are returned, this is a finding.
V-261375
False
SLEM-05-432025
Verify the "sudoers" file restricts sudo access to authorized personnel with the following command:
> sudo grep -iw 'ALL' /etc/sudoers /etc/sudoers.d/*
root ALL=(ALL) ALL
If "ALL ALL=(ALL) ALL" or "ALL ALL=(ALL:ALL) ALL" entries are returned, this is a finding.
M
5596