STIGQter: STIG Summary: Red Hat Enterprise Linux 10 Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

RHEL 10 must restrict privilege elevation to authorized personnel.

DISA Rule

SV-281207r1166573_rule

Vulnerability Number

V-281207

Group Title

SRG-OS-000445-GPOS-00199

Rule Version

RHEL-10-600520

Severity

CAT II

CCI(s)

• CCI-002696 - Verify correct operation of organization-defined security functions.

Weight

10

Fix Recommendation

Configure RHEL 10 to restrict privilege elevation to authorized personnel.

Remove the following entries from the "/etc/sudoers" file or configuration file under "/etc/sudoers.d/":

ALL ALL=(ALL) ALL
ALL ALL=(ALL:ALL) ALL

Check Contents

Verify RHEL 10 restricts privilege elevation to authorized personnel with the following command:

$ sudo grep -riw ALL /etc/sudoers /etc/sudoers.d/ | grep -v "#"

If the either of the following entries is returned, this is a finding:

ALL ALL=(ALL) ALL
ALL ALL=(ALL:ALL) ALL

Vulnerability Number

V-281207

Documentable

False

Rule Version

RHEL-10-600520

Severity Override Guidance

Verify RHEL 10 restricts privilege elevation to authorized personnel with the following command:

$ sudo grep -riw ALL /etc/sudoers /etc/sudoers.d/ | grep -v "#"

If the either of the following entries is returned, this is a finding:

ALL ALL=(ALL) ALL
ALL ALL=(ALL:ALL) ALL

Check Content Reference

M

Target Key

5733