1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
|
documentation_complete: true
title: 'A remote time server for Chrony is configured'
description: |-
<tt>Chrony</tt> is a daemon which implements the Network Time Protocol (NTP). It is designed
to synchronize system clocks across a variety of systems and use a source that is highly
accurate. More information on <tt>chrony</tt> can be found at
{{{ weblink(link="https://chrony-project.org/") }}}.
<tt>Chrony</tt> can be configured to be a client and/or a server.
Add or edit server or pool lines to <tt>{{{ chrony_conf_path }}}</tt> as appropriate:
<pre>server <remote-server></pre>
Multiple servers may be configured.
rationale: |-
If <tt>chrony</tt> is in use on the system proper configuration is vital to ensuring time
synchronization is working properly.
severity: medium
platform: package[chrony]
identifiers:
cce@rhel8: CCE-82873-1
cce@rhel9: CCE-84218-7
cce@rhel10: CCE-86811-7
cce@sle12: CCE-91631-2
cce@sle15: CCE-85833-2
cce@slmicro5: CCE-93803-5
references:
cis@sle12: 2.2.1.3
cis@sle15: 2.2.1.3
ism: 0988,1405
nist: CM-6(a),AU-8(1)(a)
pcidss: Req-10.4.3
srg: SRG-OS-000355-GPOS-00143
ocil_clause: 'a remote time server is not configured'
ocil: |-
Run the following command and verify remote server is configured properly:
<pre># grep -E "^(server|pool)" {{{ chrony_conf_path }}}</pre>
|
