Cloud Linux AlmaLinux OS 9 Security Technical Implementation Guide

The Cloud Linux AlmaLinux OS 9 Security Technical Implementation Guide (V1 R8) has 439 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

439STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R8

CurrentPublished Wed Sep 30 2026

AlmaLinux OS 9 must not be configured to bypass password requirements for privilege escalation.

Cloud Linux AlmaLinux OS 9 Security Technical Implementation Guide

Assessment Title

Rule Text

AlmaLinux OS 9 must not be configured to bypass password requirements for privilege escalation.

Description

Discussion Text

Without re-authentication, users may access resources or perform tasks for which they do not have authorization.

When operating systems provide the capability to escalate a functional capability, it is critical the user re-authenticate.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-269361

Rule

SV-269361r1050244_rule

Severity

medium

Rule Version

ALMA-09-032140

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify the operating system is not configured to bypass password requirements for privilege escalation with the following command:

$ grep pam_succeed_if /etc/pam.d/sudo 

If any occurrences of "pam_succeed_if" are returned, this is a finding.

Implementation Procedure

Fix Text

Configure the operating system to require users to supply a password for privilege escalation.

Remove any occurrences of " pam_succeed_if " in the  "/etc/pam.d/sudo" file.

STIG check 251 of 439 in the Cloud Linux AlmaLinux OS 9 STIG checklist

← Previous · V-269360AlmaLinux OS 9 must require users to provide a password for privilege escalation.Next · V-269362 →AlmaLinux OS 9 must require reauthentication when using the "sudo" command.