Merge pull request #11563 from Mab879/update_r40

Update ANSSI R40
ComplianceAsCode · Feb 9, 2024 · 6515f81 · 6515f81
2 parents 8734eed + 2e4ee46
commit 6515f81
Showing 1 changed file with 4 additions and 6 deletions.
diff --git a/controls/anssi.yml b/controls/anssi.yml
@@ -913,15 +913,13 @@ controls:
     - sudo_add_env_reset
 
   - id: R40
-    title: User authentication running sudo
+    title: Privileges of target sudo users
+    description: The targeted users of a rule should be, as much as possible, non privileged users.
     levels:
-    - minimal
-    description: >-
-      The calling user must be authenticated before running any command with sudo.
+    - intermediary
     status: automated
     rules:
-    - sudo_remove_nopasswd
-    - sudo_remove_no_authenticate
+    - sudoers_no_root_target
 
   - id: R41
     title: Limiting the number of commands requiring the use of the EXEC option