Detections
Analytics

1.228 ALMA-09-028620

Information

AlmaLinux OS 9 must prevent the chrony daemon from acting as a server.

GROUP ID: V-269333
RULE ID: SV-269333r1050215

Being able to determine the system time of a server can be useful information for various attacks from timebomb attacks to location discovery based on time zone.

Minimizing the exposure of the server functionality of the chrony daemon reduces the attack surface.

Solution

Configure AlmaLinux OS 9 to disable the chrony daemon from acting as a server by adding/modifying the following line in the /etc/chrony.conf file:

port 0

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7, 800-53|CM-7a., CCI|CCI-000381, Rule-ID|SV-269333r1050215_rule, STIG-ID|ALMA-09-028620, Vuln-ID|V-269333

Plugin: Unix

Control ID: 0941b08e2a7ae304a1e7726407177d752eeaefa0dc6f52c395d7c40b90c40ec6