Detections
Analytics

2.2.1.3 Ensure ntp is configured

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

ntp is a daemon which implements the Network Time Protocol (NTP). It is designed to synchronize system clocks across a variety of systems and use a source that is highly accurate. More information on NTP can be found at http://www.ntp.org http://www.ntp.org/ . ntp can be configured to be a client and/or a server.

Note: This recommendation only applies if ntp is in use on the system.

If ntp is in use on the system proper configuration is vital to ensuring time synchronization is working properly.

Solution

Add or edit restrict lines in /etc/ntp.conf to match the following:

restrict -4 default kod nomodify notrap nopeer noquery
restrict -6 default kod nomodify notrap nopeer noquery

Add or edit server or pool lines to /etc/ntp.conf as appropriate:

server <remote-server>

Add or edit the OPTIONS in /etc/sysconfig/ntpd to include ' -u ntp:ntp ':

OPTIONS="-u ntp:ntp"

Reload the systemd daemon:

systemctl daemon-reload

Enable and start the ntp service:

systemctl --now enable ntpd

See Also

https://workbench.cisecurity.org/benchmarks/8415

Item Details

References: CSCv7|6.1

Plugin: Unix

Control ID: 8ea3a583c2048f6f72289ef3e87ab23dab4c39e4a6d2a59baa929159f2231634