Ensure the Time Service Is Enabled

中等級 1自動化macos

說明

In macOS 10.14, Apple replace ntp with timed for time services, and is used to ensure correct time is kept. Correct date and time settings are required for authentication protocols, file creation, modification dates, and log entries. Kerberos may not operate correctly if the time on the Mac is off by more than 5 minutes. This in turn can affect Apple's single sign-on feature, Active Directory logons, and other features.

檢查方式

稽核方法: Shell 指令

shell

out=$(/bin/launchctl list 2>/dev/null) || exit 1
printf '%s\n' "$out" | /usr/bin/grep -c 'com.apple.timed' || true

預期輸出: 1

修補方式

修補方法: 操作指南或基礎設施修補檔

Terminal Method: Run the following commands to enable the timed service: % /usr/bin/sudo /bin/launchctl load -w /System/Library/LaunchDaemons/com.apple.timed.plist

屬性

作業系統: macos-14
標籤: macossonoma
參考資料: CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 2.3.2.2 Ensure the Time Service Is Enabled

檢查此主機

請在您有權稽核的機器上執行此指令。掃描為唯讀操作。

shell

tmaegis scan --target macos