TMA-ROS1-2.2.1.2
Ensure systemd-timesyncd is configured
Deskripsi
systemd-timesyncd is a daemon that has been added for synchronizing the system clock across the network. It implements an SNTP client. In contrast to NTP implementations such as chrony or the NTP reference server this only implements a client side, and does not bother with the full NTP complexity, focusing only on querying time from one remote server and synchronizing the ... Manual review against site policy. Host-level control from the CIS ROS Melodic benchmark (Ubuntu 18.04 robot hosts); run as root.
Cara pemeriksaan
Metode audit: Tinjauan manual
Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.
Ensure that timesyncd is enabled and started Run the following commands: # systemctl is-enabled systemd-timesyncd.service This should return: enabled Review /etc/systemd/timesyncd.conf and ensure that the NTP servers, NTP FallbackNTP servers, and RootDistanceMaxSec listed are in accordance with local policy Run the following command # timedatectl status This should return something similar to: Local time: Tue 2019-06-04 15:40:45 EDT Universal time: Tue 2019-06-04 19:40:45 UTC RTC time: Tue 2019-06-04 19:40:45 Time zone: America/New_York (EDT, -0400) NTP enabled: yes NTP synchronized: yes RTC ...
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
Run the following command to enable systemd-timesyncd # systemctl enable systemd-timesyncd.service edit the file /etc/systemd/timesyncd.conf and add/modify the following lines in accordance with local site policy NTP=0.ubuntu.pool.ntp.org 1.ubuntu.pool.ntp.org 2.ubuntu.pool.ntp.org FallbackNTP=ntp.ubuntu.com 3.ubuntu.pool.ntp.org RootDistanceMaxSec=1 Run the following commands to start systemd-timesyncd.service # systemctl start systemd-timesyncd.service # timedatectl set-ntp true
Properti
- Sistem operasi
- Apa saja
- Tag
- rosros1melodicservices
- Referensi
- CIS ROS Melodic Benchmark v1.0.0 - 2.2.1.2 Ensure systemd-timesyncd is configured