STIGQter: STIG Summary: Oracle Linux 9 Security Technical Implementation Guide Version: 1 Release: 6 Benchmark Date: 01 Jul 2026:

OL 9 must require users to provide a password for privilege escalation.

DISA Rule

SV-271725r1155318_rule

Vulnerability Number

V-271725

Group Title

SRG-OS-000327-GPOS-00127

Rule Version

OL09-00-002363

Severity

CAT II

CCI(s)

• CCI-002234 - Log the execution of privileged functions.

Weight

10

Fix Recommendation

Configure OL 9 to not allow users to execute privileged actions without authenticating with a password.

Remove any occurrence of "NOPASSWD" found in "/etc/sudoers" file or files in the "/etc/sudoers.d" directory.

$ sudo sed -i '/NOPASSWD/ s/^/# /g' /etc/sudoers /etc/sudoers.d/*

Check Contents

Verify OL 9 requires users to provide a password for privilege escalation.

Verify "/etc/sudoers" has no occurrences of "NOPASSWD" with the following command:

$ sudo grep -iR nopasswd /etc/sudoers /etc/sudoers.d/

If any occurrences of "NOPASSWD" are returned from the command and have not been documented with the information system security officer (ISSO) as an organizationally defined administrative group using multifactor authentication (MFA), this is a finding.

Vulnerability Number

V-271725

Documentable

False

Rule Version

OL09-00-002363

Severity Override Guidance

Verify OL 9 requires users to provide a password for privilege escalation.

Verify "/etc/sudoers" has no occurrences of "NOPASSWD" with the following command:

$ sudo grep -iR nopasswd /etc/sudoers /etc/sudoers.d/

If any occurrences of "NOPASSWD" are returned from the command and have not been documented with the information system security officer (ISSO) as an organizationally defined administrative group using multifactor authentication (MFA), this is a finding.

Check Content Reference

M

Target Key

5680