0067-sudo-install sudo Not Installed¶

Rule ID¶

• 0067-sudo-install

Category¶

• system

Level¶

• warn

Supported Versions¶

• Linux

Description¶

• sudo is a Linux system administration command that allows system administrators to grant ordinary users the ability to execute some or all root commands, such as halt, reboot, su, etc. This reduces the time and effort required for root login and management while also improving security. sudo is not a replacement for the shell; it is command-oriented.

• Note: visudo edits the sudoers file in a secure manner similar to vipw(8). visudo locks the sudoers file to prevent simultaneous edits, performs basic integrity checks, and checks for parsing errors. If the current user is already editing the sudoers file, you will receive a prompt message to try again later.

Scan Frequency¶

• 0 */30 * * *

Rationale¶

• Better allocation of user permissions, reducing the need for root administrative operations. This improves system security.

Risk Items¶

• Increased root administrative operations, significantly reducing system security.

Audit Method¶

• Verify whether sudo is installed. Run the following command:

# rpm -q sudo
sudo-<VERSION>

Remediation¶

• Run the following command to install sudo:

# yum install sudo

Impact¶

• After installation, you can grant ordinary users the necessary permissions based on business requirements, avoiding root user operations as much as possible.

Default Value¶

• By default, sudo is installed.

References¶

• None

CIS Controls¶

• Version 7 > 4 Controlled Use of Administrative Privileges > > Controlled Use of Administrative Privileges