1. Proposed title of this feature request

Enable Sudo Password for Core User

2. What is the nature and description of the request?

In OpenShift / RHCOS, we would like for it to be possible to configure the Core user to require a password to use sudo. Today, the Core user does not require a password because of the /etc/sudoers.d/coreos-sudo-group file, which contains:

%sudo ALL=(ALL) NOPASSWD: ALL

3. Why does the customer need this? (List the business requirements here)

This is a compliance requirement from an external auditor. Auditors expect that operating systems protect root access via requiring a sudo password. OpenShift fails this requirement today.