Detections
Analytics

2.3.3.2 Ensure chrony is running as user _chrony

Information

The chrony package is installed with a dedicated user account _chrony . This account is granted the access required by the chronyd service

The chronyd service should run with only the required privlidges

Solution

Add or edit the user line to /etc/chrony/chrony.conf or a file ending in .conf in /etc/chrony/conf.d/ :

user _chrony

- OR -

If another time synchronization service is in use on the system, run the following command to remove chrony from the system:

# apt purge chrony
# apt autoremove chrony

See Also

https://workbench.cisecurity.org/benchmarks/24330

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-8

Plugin: Unix

Control ID: 24d04043410f85b687126d3b0c1367448bba29fdc85c191871056b477206d599