TMA-ROS1-2.2.1.2
Ensure systemd-timesyncd is configured
Опис
systemd-timesyncd is a daemon that has been added for synchronizing the system clock across the network. It implements an SNTP client. In contrast to NTP implementations such as chrony or the NTP reference server this only implements a client side, and does not bother with the full NTP complexity, focusing only on querying time from one remote server and synchronizing the ... Manual review against site policy. Host-level control from the CIS ROS Melodic benchmark (Ubuntu 18.04 robot hosts); run as root.
Како се проверава
Метод провере: Ручни преглед
Ова препорука се не може проверити аутоматски. Скенирање је наводи са овим упутствима када проследите --include-manual.
Ensure that timesyncd is enabled and started Run the following commands: # systemctl is-enabled systemd-timesyncd.service This should return: enabled Review /etc/systemd/timesyncd.conf and ensure that the NTP servers, NTP FallbackNTP servers, and RootDistanceMaxSec listed are in accordance with local policy Run the following command # timedatectl status This should return something similar to: Local time: Tue 2019-06-04 15:40:45 EDT Universal time: Tue 2019-06-04 19:40:45 UTC RTC time: Tue 2019-06-04 19:40:45 Time zone: America/New_York (EDT, -0400) NTP enabled: yes NTP synchronized: yes RTC ...
Како се исправља
Метод исправке: Смерница или закрпа инфраструктуре
Run the following command to enable systemd-timesyncd # systemctl enable systemd-timesyncd.service edit the file /etc/systemd/timesyncd.conf and add/modify the following lines in accordance with local site policy NTP=0.ubuntu.pool.ntp.org 1.ubuntu.pool.ntp.org 2.ubuntu.pool.ntp.org FallbackNTP=ntp.ubuntu.com 3.ubuntu.pool.ntp.org RootDistanceMaxSec=1 Run the following commands to start systemd-timesyncd.service # systemctl start systemd-timesyncd.service # timedatectl set-ntp true
Својства
- Оперативни системи
- Било који
- Ознаке
- rosros1melodicservices
- Референца
- CIS ROS Melodic Benchmark v1.0.0 - 2.2.1.2 Ensure systemd-timesyncd is configured