STIGQter: STIG Summary: Red Hat Enterprise Linux 10 Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

RHEL 10 must use the invoking user's password for privilege escalation when using "sudo".

DISA Rule

SV-281210r1166582_rule

Vulnerability Number

V-281210

Group Title

SRG-OS-000373-GPOS-00156

Rule Version

RHEL-10-600550

Severity

CAT II

CCI(s)

CCI-000366 - Implement the security configuration settings.

Weight

Fix Recommendation

Configure RHEL 10 to use the invoking user's password for privilege escalation when using "sudo".

Define the following in the Defaults section of the /etc/sudoers file or a single configuration file in the /etc/sudoers.d/ directory:

Defaults !targetpw
Defaults !rootpw
Defaults !runaspw

Check Contents

Verify RHEL 10 sudoers security policy is configured to use the invoking user's password for privilege escalation with the following command:

$ sudo grep -irE '(!rootpw|!targetpw|!runaspw)' /etc/sudoers /etc/sudoers.d/ | grep -v '#'
/etc/sudoers:Defaults !targetpw
/etc/sudoers:Defaults !rootpw
/etc/sudoers:Defaults !runaspw

If no results are returned, this is a finding.

If results are returned from more than one file location, this is a finding.

If "Defaults !targetpw" is not defined, this is a finding.

If "Defaults !rootpw" is not defined, this is a finding.

If "Defaults !runaspw" is not defined, this is a finding.

Vulnerability Number

V-281210

Documentable

False

Rule Version

RHEL-10-600550

Severity Override Guidance

Check Content Reference

Target Key

5733