TMA-ROS1-2.2.1.2
Ensure systemd-timesyncd is configured
說明
systemd-timesyncd is a daemon that has been added for synchronizing the system clock across the network. It implements an SNTP client. In contrast to NTP implementations such as chrony or the NTP reference server this only implements a client side, and does not bother with the full NTP complexity, focusing only on querying time from one remote server and synchronizing the ... Manual review against site policy. Host-level control from the CIS ROS Melodic benchmark (Ubuntu 18.04 robot hosts); run as root.
檢查方式
稽核方法: 人工審核
此項建議無法自動檢查。當您傳入 --include-manual 時，掃描結果會列出此項目並附帶這些說明。
Ensure that timesyncd is enabled and started Run the following commands: # systemctl is-enabled systemd-timesyncd.service This should return: enabled Review /etc/systemd/timesyncd.conf and ensure that the NTP servers, NTP FallbackNTP servers, and RootDistanceMaxSec listed are in accordance with local policy Run the following command # timedatectl status This should return something similar to: Local time: Tue 2019-06-04 15:40:45 EDT Universal time: Tue 2019-06-04 19:40:45 UTC RTC time: Tue 2019-06-04 19:40:45 Time zone: America/New_York (EDT, -0400) NTP enabled: yes NTP synchronized: yes RTC ...
修補方式
修補方法: 操作指南或基礎設施修補檔
Run the following command to enable systemd-timesyncd # systemctl enable systemd-timesyncd.service edit the file /etc/systemd/timesyncd.conf and add/modify the following lines in accordance with local site policy NTP=0.ubuntu.pool.ntp.org 1.ubuntu.pool.ntp.org 2.ubuntu.pool.ntp.org FallbackNTP=ntp.ubuntu.com 3.ubuntu.pool.ntp.org RootDistanceMaxSec=1 Run the following commands to start systemd-timesyncd.service # systemctl start systemd-timesyncd.service # timedatectl set-ntp true
屬性
- 作業系統
- 不限
- 標籤
- rosros1melodicservices
- 參考資料
- CIS ROS Melodic Benchmark v1.0.0 - 2.2.1.2 Ensure systemd-timesyncd is configured