The Chrony package is installed
An XCCDF Rule
Description
System time should be synchronized between all systems in an environment. This is
typically done by establishing an authoritative time server or set of servers and having all
systems synchronize their clocks to them.
The chrony package can be installed with the following command:
$ sudo dnf install chrony
Rationale
Time synchronization is important to support time sensitive security mechanisms like Kerberos and also ensures log files have consistent time records across the enterprise, which aids in forensic investigations.
- ID
- xccdf_org.ssgproject.content_rule_package_chrony_installed
- Severity
- Medium
- References
- Updated
Remediation - Puppet
include install_chrony
class install_chrony {
package { 'chrony':
ensure => 'installed',
}
Remediation - Ansible
- name: Gather the package facts
package_facts:
manager: auto
tags:
- PCI-DSS-Req-10.4
- PCI-DSSv4-10.6
Remediation - OS Build Blueprint
[[packages]]
name = "chrony"
version = "*"