documentation_complete: true


title: 'Install sudo Package'

description: |-
    {{{ describe_package_install(package="sudo") }}}

rationale: |-
    <tt>sudo</tt> is a program designed to allow a system administrator to give
    limited root privileges to users and log root activity. The basic philosophy
    is to give as few privileges as possible but still allow system users to
    get their work done.

severity: medium

identifiers:
    cce@rhcos4: CCE-82523-2
    cce@rhel8: CCE-82214-8
    cce@rhel9: CCE-83523-1
    cce@rhel10: CCE-87100-4
    cce@sle12: CCE-91491-1
    cce@sle15: CCE-91183-4
    cce@slmicro5: CCE-94075-9

references:
    cis@sle12: 1.3.1
    cis@sle15: 1.3.1
    nist: CM-6(a)
    ospp: FMT_MOF_EXT.1
    srg: SRG-OS-000324-GPOS-00125

ocil_clause: 'the package is not installed'

ocil: '{{{ ocil_package(package="sudo") }}}'

fixtext: |-
    {{{ describe_package_install(package="sudo") }}}

srg_requirement: '{{{ srg_requirement_package_installed("sudo") }}}'

template:
    name: package_installed
    vars:
        pkgname: sudo
