Detections
Analytics
RHEL-09-252025 - RHEL 9 must disable the chrony daemon from acting as a server.
Information
Minimizing the exposure of the server functionality of the chrony daemon diminishes the attack surface.Satisfies: SRG-OS-000096-GPOS-00050, SRG-OS-000095-GPOS-00049
Solution
Configure RHEL 9 to disable the chrony daemon from acting as a server by adding/modifying the following line in the /etc/chrony.conf file:port 0
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_RHEL_9_V2R8_STIG.zip
Item Details
Audit Name: DISA Red Hat Enterprise Linux 9 STIG v2r8
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-7a., 800-53|CM-7b., CAT|III, CCI|CCI-000381, CCI|CCI-000382, Rule-ID|SV-257946r1184307_rule, STIG-ID|RHEL-09-252025, Vuln-ID|V-257946
Plugin: Unix
Control ID: ab6e44ccb68e1fc576b0e53ee60b7498cec02be4d9067121507979c3473d7aaf