Detections
Analytics
OL09-00-002321 - OL 9 must disable network management of the chrony daemon.
Information
Not exposing the management interface of the chrony daemon on the network diminishes the attack space.Satisfies: SRG-OS-000096-GPOS-00050, SRG-OS-000095-GPOS-00049
Solution
Configure OL 9 to disable network management of the chrony daemon by adding/modifying the following line in the /etc/chrony.conf file:cmdport 0
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_9_V1R5_STIG.zip
Item Details
Audit Name: DISA Oracle Linux 9 STIG v1r5
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-7a., 800-53|CM-7b., CAT|III, CCI|CCI-000381, CCI|CCI-000382, Rule-ID|SV-271698r1091806_rule, STIG-ID|OL09-00-002321, Vuln-ID|V-271698
Plugin: Unix
Control ID: 9735ab0f6ee2111d44ea50f8bc969605ebc52823c84c8a7b9141d9aeda2eff81