TOSS 5 must restrict privilege elevation to authorized personnel.

If the "sudoers" file is not configured correctly, any user defined on the system can initiate privileged actions on the target system.

Verify TOSS 5 restricts privilege elevation to authorized personnel using the following command:

$ sudo sh -c 'grep -iw ALL /etc/sudoers /etc/sudoers.d/*'

If the either of the following entries are returned, this is a finding:

ALL ALL=(ALL) ALL ALL ALL=(ALL:ALL) ALL

Remove the following entries from the /etc/sudoers file or configuration file under /etc/sudoers.d/:

ALL ALL=(ALL) ALL ALL ALL=(ALL:ALL) ALL