The container platform must use internal system clocks to generate audit record time stamps.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-233055	SRG-APP-000116-CTR-000235	SV-233055r600654_rule		Medium

Description
Understanding when and sequence of events for an incident is crucial to understand what may have taken place. Without a common clock, the components generating audit events could be out of synchronization and would then present a picture of the event that is warped and corrupted. To give a clear picture, it is important that the container platform and its components use a common internal clock.

STIG	Date
Container Platform Security Requirements Guide	2021-12-14

Details

Check Text ( C-35991r600652_chk )
Review the container platform configuration files to determine if the internal system clock is used for time stamps. If the container platform does not use the internal system clock to generate time stamps, this is a finding.

Fix Text (F-35959r600653_fix)
Configure the container platform to use internal system clocks to generate time stamps for log records.