Skip to content
Log In

The Chrony package is installed

An XCCDF Rule

Description

System time should be synchronized between all systems in an environment. This is typically done by establishing an authoritative time server or set of servers and having all systems synchronize their clocks to them. The chrony package can be installed with the following command: 
$ sudo dnf install chrony

Rationale

Time synchronization is important to support time sensitive security mechanisms like Kerberos and also ensures log files have consistent time records across the enterprise, which aids in forensic investigations.

ID
xccdf_org.ssgproject.content_rule_package_chrony_installed
Severity
Medium
References
Updated

Remediation Templates

Anaconda Pre-Install Instructions

package --add=chrony

A Puppet Snippet

include install_chrony
class install_chrony {
  package { 'chrony':
    ensure => 'installed',
  }
}

OS Build Blueprint

[[packages]]
name = "chrony"
version = "*"

An Ansible Snippet

- name: Ensure chrony is installed
  package:
    name: chrony
    state: present
  when: ansible_virtualization_type not in ["docker", "lxc", "openvz", "podman", "container"]
  tags:

A Shell Script

# Remediation is applicable only in certain platforms
if [ ! -f /.dockerenv ] && [ ! -f /run/.containerenv ]; then
if ! rpm -q --quiet "chrony" ; then
    dnf install -y "chrony"
fi

script:kickstart

package install chrony