Ensure the Time Service Is Enabled

MediaNivel 1Automatizadamacos

Descripción

In macOS 10.14, Apple replace ntp with timed for time services, and is used to ensure correct time is kept. Correct date and time settings are required for authentication protocols, file creation, modification dates, and log entries. Kerberos may not operate correctly if the time on the Mac is off by more than 5 minutes. This in turn can affect Apple's single sign-on feature, Active Directory logons, and other features.

Cómo se verifica

Método de auditoría: Comando de shell

shell

out=$(/bin/launchctl list 2>/dev/null) || exit 1
printf '%s\n' "$out" | /usr/bin/grep -c 'com.apple.timed' || true

Salida esperada: 1

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Terminal Method: Run the following commands to enable the timed service: % /usr/bin/sudo /bin/launchctl load -w /System/Library/LaunchDaemons/com.apple.timed.plist

Propiedades

Sistemas operativos: macos-14
Etiquetas: macossonoma
Referencia: CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 2.3.2.2 Ensure the Time Service Is Enabled

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target macos