<def-group>
  <definition class="compliance" id="sudo_require_authentication" version="1">
    {{{ oval_metadata("Checks sudo usage without password") }}}
    <criteria operator="AND">
      <extend_definition definition_ref="sudo_remove_no_authenticate" />
      <extend_definition definition_ref="sudo_remove_nopasswd" />
    </criteria>
  </definition>
</def-group>
