Uninstall the ntpdate package
An XCCDF Rule
Description
ntpdate is a historical ntp synchronization client for unixes. It sould be uninstalled.
Rationale
ntpdate is an old not security-compliant ntp client. It should be replaced by modern ntp clients such as ntpd, able to use cryptographic mechanisms integrated in NTP.
- ID
- xccdf_org.ssgproject.content_rule_package_ntpdate_removed
- Severity
- Low
- Updated
Remediation - Puppet
include remove_ntpdate
class remove_ntpdate {
package { 'ntpdate':
ensure => 'purged',
}
Remediation - Shell Script
# CAUTION: This remediation script will remove ntpdate
# from the system, and may remove any packages
# that depend on ntpdate. Execute this
# remediation AFTER testing on a non-production
# system!
Remediation - Anaconda Pre-Install Instructions
package --remove=ntpdate
Remediation - Ansible
- name: Ensure ntpdate is removed
package:
name: ntpdate
state: absent
tags:
- disable_strategy