TOSS 5 must not be configured to bypass password requirements for privilege escalation.

Without reauthentication, users may access resources or perform tasks for which they do not have authorization. When operating systems provide the capability to escalate a functional capability, it is critical that the user reauthenticate.

Verify TOSS 5 is not configured to bypass password requirements for privilege escalation using the following command:

$ sudo grep pam_succeed_if /etc/pam.d/sudo 

If any occurrences of " pam_succeed_if " are returned, this is a finding.

Configure TOSS 5 to require users to supply a password for privilege escalation.

Remove any occurrences of " pam_succeed_if " in the "/etc/pam.d/sudo" file.