RHEL 9 must disable network management of the chrony daemon.
An XCCDF Rule
Description
Not exposing the management interface of the chrony daemon on the network diminishes the attack space. Satisfies: SRG-OS-000096-GPOS-00050, SRG-OS-000095-GPOS-00049
- ID
- SV-257947r958480_rule
- Version
- RHEL-09-252030
- Severity
- Low
- References
- Updated
Remediation Templates
A Manual Procedure
Configure RHEL 9 to disable network management of the chrony daemon by adding/modifying the following line in the /etc/chrony.conf file:
cmdport 0