TMA-ROS1-2.2.1.2
Ensure systemd-timesyncd is configured
Описание
systemd-timesyncd is a daemon that has been added for synchronizing the system clock across the network. It implements an SNTP client. In contrast to NTP implementations such as chrony or the NTP reference server this only implements a client side, and does not bother with the full NTP complexity, focusing only on querying time from one remote server and synchronizing the ... Manual review against site policy. Host-level control from the CIS ROS Melodic benchmark (Ubuntu 18.04 robot hosts); run as root.
Как проверяется
Метод проверки: Ручная проверка
Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.
Ensure that timesyncd is enabled and started Run the following commands: # systemctl is-enabled systemd-timesyncd.service This should return: enabled Review /etc/systemd/timesyncd.conf and ensure that the NTP servers, NTP FallbackNTP servers, and RootDistanceMaxSec listed are in accordance with local policy Run the following command # timedatectl status This should return something similar to: Local time: Tue 2019-06-04 15:40:45 EDT Universal time: Tue 2019-06-04 19:40:45 UTC RTC time: Tue 2019-06-04 19:40:45 Time zone: America/New_York (EDT, -0400) NTP enabled: yes NTP synchronized: yes RTC ...
Как исправляется
Метод исправления: Рекомендация или патч инфраструктуры
Run the following command to enable systemd-timesyncd # systemctl enable systemd-timesyncd.service edit the file /etc/systemd/timesyncd.conf and add/modify the following lines in accordance with local site policy NTP=0.ubuntu.pool.ntp.org 1.ubuntu.pool.ntp.org 2.ubuntu.pool.ntp.org FallbackNTP=ntp.ubuntu.com 3.ubuntu.pool.ntp.org RootDistanceMaxSec=1 Run the following commands to start systemd-timesyncd.service # systemctl start systemd-timesyncd.service # timedatectl set-ntp true
Свойства
- Операционные системы
- Любая
- Теги
- rosros1melodicservices
- Источник
- CIS ROS Melodic Benchmark v1.0.0 - 2.2.1.2 Ensure systemd-timesyncd is configured