ALMA-09-028510 - AlmaLinux OS 9 must disable remote management of the chrony daemon.

Information

Not exposing the management interface of the chrony daemon on the network reduces the attack surface.

Solution

Configure AlmaLinux OS 9 to disable remote management of the chrony daemon by adding/modifying the following line in the /etc/chrony.conf file:

cmdport 0

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_CL_AlmaLinux_OS_9_V1R6_STIG.zip