Ensure systemd-timesyncd is configured

中级别 1人工审核ros

说明

systemd-timesyncd is a daemon that has been added for synchronizing the system clock across the network. It implements an SNTP client. In contrast to NTP implementations such as chrony or the NTP reference server this only implements a client side, and does not bother with the full NTP complexity, focusing only on querying time from one remote server and synchronizing the ... Manual review against site policy. Host-level control from the CIS ROS Melodic benchmark (Ubuntu 18.04 robot hosts); run as root.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

Ensure that timesyncd is enabled and started Run the following commands: # systemctl is-enabled systemd-timesyncd.service This should return: enabled Review /etc/systemd/timesyncd.conf and ensure that the NTP servers, NTP FallbackNTP servers, and RootDistanceMaxSec listed are in accordance with local policy Run the following command # timedatectl status This should return something similar to: Local time: Tue 2019-06-04 15:40:45 EDT Universal time: Tue 2019-06-04 19:40:45 UTC RTC time: Tue 2019-06-04 19:40:45 Time zone: America/New_York (EDT, -0400) NTP enabled: yes NTP synchronized: yes RTC ...

修复方式

修复方法: 操作指南或基础设施补丁

Run the following command to enable systemd-timesyncd # systemctl enable systemd-timesyncd.service edit the file /etc/systemd/timesyncd.conf and add/modify the following lines in accordance with local site policy NTP=0.ubuntu.pool.ntp.org 1.ubuntu.pool.ntp.org 2.ubuntu.pool.ntp.org FallbackNTP=ntp.ubuntu.com 3.ubuntu.pool.ntp.org RootDistanceMaxSec=1 Run the following commands to start systemd-timesyncd.service # systemctl start systemd-timesyncd.service # timedatectl set-ntp true

属性

操作系统: 任意
标签: rosros1melodicservices
参考: CIS ROS Melodic Benchmark v1.0.0 - 2.2.1.2 Ensure systemd-timesyncd is configured