Detections
Analytics

2.2.1.2 Ensure chrony is configured

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

chrony is a daemon which implements the Network Time Protocol (NTP) and is designed to synchronize system clocks across a variety of systems and use a source that is highly accurate. More information on chrony can be found at http://chrony.tuxfamily.org/ . chrony can be configured to be a client and/or a server.

If chrony is in use on the system proper configuration is vital to ensuring time synchronization is working properly.

Note: This recommendation only applies if chrony is in use on the system.

Solution

Add or edit server or pool lines to /etc/chrony.conf as appropriate:

server <remote-server>

Add or edit the OPTIONS in /etc/sysconfig/chronyd to include ' -u chrony ':

OPTIONS="-u chrony"

See Also

https://workbench.cisecurity.org/benchmarks/8415

Item Details

References: CSCv7|6.1

Plugin: Unix

Control ID: 1439448787a468b37fdc2050f8b6aa4bdaee9f0c3f337621225164a1e7fd6990