TMA-COS-2.1.1.2
Ensure chrony is configured
Açıklama
chrony is a daemon which implements the Network Time Protocol (NTP) is designed to synchronize system clocks across a variety of systems and use a source that is highly accurate. More information on chrony can be found at http://chrony.tuxfamily.org/. chrony can be configured to be a client and/or a server. If chrony is in use on the system proper configuration is vital to ensuring time synchronization is working properly. This recommendation only applies if chrony is in use on the system.
Nasıl denetlenir
Denetim yöntemi: Manuel inceleme
Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.
Run the following command and verify remote server is configured properly: # grep -E "^(server|pool)" /etc/chrony/chrony.conf server <remote-server> Multiple servers may be configured. Run the following command and verify the first field for the chronyd process is ntp or chrony: # ps -ef | grep chronyd ntp 491 1 0 20:32 ? 00:00:00 /usr/sbin/chronyd Or # ps -ef | grep chronyd chrony 491 1 0 20:32 ? 00:00:00 /usr/sbin/chronyd
Nasıl düzeltilir
Düzeltme yöntemi: Kılavuz veya altyapı yaması
Update to an OS image that has the correct chrony configuration.
Özellikler
- İşletim sistemleri
- Herhangi biri
- Etiketler
- container-optimized-oscos
- Referans
- CIS Google Container-Optimized OS Benchmark v1.2.0 - 2.1.1.2 Ensure chrony is configured