cyberstrikeus CIS Ubuntu Linux 18.04 LTS Benchmark v2.2.0 - Control 4.3.1
Profile Applicability
- Level 1 - Server
- Level 1 - Workstation
Description
sudo allows a permitted user to execute a command as the superuser or another user, as specified by the security policy. The invoking user's real (not effective) user-ID is used to determine the user name with which to query the security policy.
Rationale
sudo supports a plugin architecture for security policies and input/output logging. Third parties can develop and distribute their own policy and I/O logging plugins to work seamlessly with the sudo front end. The default security policy is sudoers, which is configured via the file /etc/sudoers.
Audit Procedure
Command Line
Run the following command to verify that sudo is installed:
dpkg-query -s sudo | grep -i status
Expected Result
Status: install ok installed
Remediation
Command Line
Install sudo using the following command:
apt install sudo
References
- NIST SP 800-53 Rev. 5: AC-6(1)
CIS Controls
v8 - 5.4 Restrict Administrator Privileges to Dedicated Administrator Accounts - Restrict administrator privileges to dedicated administrator accounts on enterprise assets.
v7 - 4.3 Ensure the Use of Dedicated Administrative Accounts.
Profile Applicability
- Level 1 - Server
- Level 1 - Workstation
Assessment Status
Automated