STIGQter: STIG Summary: Cloud Linux AlmaLinux OS 9 Security Technical Implementation Guide Version: 1 Release: 7 Benchmark Date: 01 Jul 2026:

AlmaLinux OS 9 must require users to provide authentication for privilege escalation.

DISA Rule

SV-269359r1101824_rule

Vulnerability Number

V-269359

Group Title

SRG-OS-000327-GPOS-00127

Rule Version

ALMA-09-031920

Severity

CAT II

CCI(s)

• CCI-002234 - Log the execution of privileged functions.

Weight

10

Fix Recommendation

Configure AlmaLinux OS 9 to not allow users to execute privileged actions without authenticating.

Remove any occurrence of "!authenticate" found in the "/etc/sudoers" file or files in the "/etc/sudoers.d" directory with the following command:

$ sed -i '/\!authenticate/ s/^/# /g' /etc/sudoers /etc/sudoers.d/*

Check Contents

Verify that "/etc/sudoers" has no occurrences of "!authenticate" with the following command:

$ sudo egrep -iR '!authenticate' /etc/sudoers /etc/sudoers.d/

If any occurrences of "!authenticate" are returned, this is a finding.

Vulnerability Number

V-269359

Documentable

False

Rule Version

ALMA-09-031920

Severity Override Guidance

Verify that "/etc/sudoers" has no occurrences of "!authenticate" with the following command:

$ sudo egrep -iR '!authenticate' /etc/sudoers /etc/sudoers.d/

If any occurrences of "!authenticate" are returned, this is a finding.

Check Content Reference

M

Target Key

5664