Detections
Analytics

2.3.3.2 Ensure chrony is running as user _chrony

Information

The chrony package is installed with a dedicated user account _chrony . This account is granted the access required by the chronyd service

The chronyd service should run with only the required privlidges

Solution

Add or edit the user line to /etc/chrony/chrony.conf or a file ending in .conf in /etc/chrony/conf.d/ :

user _chrony

- OR -

If another time synchronization service is in use on the system, run the following command to remove chrony from the system:

# apt purge chrony
# apt autoremove chrony

See Also

https://workbench.cisecurity.org/benchmarks/24932

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-8

Plugin: Unix

Control ID: d101f93c68f130a55cf5eeffe056a5469803b0477e017e9ed484d84573771c13