TMAegisBeta
More rules for macos

macOS

TMA-MACOS15-2.3.2.2

Ensure the Time Service Is Enabled

MediumLevel 1Automatedmacos

Description

In macOS 10.14, Apple replace ntp with timed for time services, and is used to ensure correct time is kept. Correct date and time settings are required for authentication protocols, file creation, modification dates, and log entries.

How it is checked

Audit method: Shell command

shell
out=$(/bin/launchctl list 2>/dev/null) || exit 1
printf '%s\n' "$out" | /usr/bin/grep -c 'com.apple.timed' || true
Expected output
1

How it is fixed

Fix method: Guidance or infrastructure patch

If the timed service has been disabled, assume that the operating system has been compromised. Back up any files, and do a clean install to a known good Operating System.

Properties

Operating systems
macos-15
Tags
macossystem-settings
Reference
CIS Apple macOS 15.0 Sequoia Benchmark v2.1.0 - 2.3.2.2 Ensure the Time Service Is Enabled

Check this host

Run this on a machine you are allowed to audit. The scan is read-only.

shell
tmaegis scan --target macos