Detections
Analytics

4.3.2.13 Ensure timed is not in use

Information

The timed daemon implements the legacy UNIX time service.

The UNIX time service is obsolete and has been replaced by NTP, it is recommended that the timed fileset be removed to reduce the potential attack surface.

If time synchronization is required in your environment use xntp.

Solution

Run the following command to remove the software:

# /usr/sbin/installp -u bos.net.tcp.timed bos.net.tcp.server

- OR -

- IF - the bos.net.tcp.timed fileset is required as a dependency:

Run the following script to stop and disable timed

#!/usr/bin/ksh
DAEMONS="timed"
for l_daemon in $DAEMONS;
do
 /usr/sbin/chrctcp -d $l_daemon
 /usr/bin/stopsrc -s $l_daemon
done

See Also

https://workbench.cisecurity.org/benchmarks/22751

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7, CCI|CCI-000381, CSCv7|9.2, Rule-ID|SV-215363r958478_rule, Vuln-ID|V-215363

Plugin: Unix

Control ID: 69aae3fbb3c73135f203e6a969eec90f5ab2cb5eec9987be44c7fbdb9a1868ab