<def-group>
    <definition class="compliance" id="{{{ rule_id }}}" version="1">
        {{{ oval_metadata("Disallow Configuration to Bypass Password Requirements for Privilege Escalation.", rule_title=rule_title) }}}
        <criteria>
            <criterion comment="Check absence of conf pam_succeed_if in /etc/pam.d/sudo"
            test_ref="test_disallow_bypass_password_sudo" />
        </criteria>
    </definition>

    <ind:textfilecontent54_test check="all" check_existence="none_exist"
    comment="Check absence of conf pam_succeed_if in /etc/pam.d/sudo"
    id="test_disallow_bypass_password_sudo" version="1">
        <ind:object object_ref="obj_disallow_bypass_password_sudo" />
    </ind:textfilecontent54_test>

    <ind:textfilecontent54_object id="obj_disallow_bypass_password_sudo" version="1">
        <ind:filepath>/etc/pam.d/sudo</ind:filepath>
        <ind:pattern operation="pattern match">^.*pam_succeed_if.*$</ind:pattern>
        <ind:instance datatype="int" operation="greater than or equal">1</ind:instance>
    </ind:textfilecontent54_object>
</def-group>
