UCF STIG Viewer Logo

The system must use time sources local to the enclave.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22292 GEN000244 SV-26305r1_rule ECSC-1 Low
Description
A synchronized system clock is critical for the enforcement of time-based policies and the correlation of logs and audit records with other systems. The network architecture should provide multiple time servers within an enclave that provide local service to the enclave and synchronize with time sources outside of the enclave. If this server is an enclave time server, this requirement is not applicable. If the system is completely isolated (no connections to networks or other systems), time synchronization is not required as no correlation of events or operation of time-dependent protocols between systems will be necessary. If the system is completely isolated, this requirement is not applicable.
STIG Date
SOLARIS 9 X86 SECURITY TECHNICAL IMPLEMENTATION GUIDE 2015-10-01

Details

Check Text ( C-27411r1_chk )
Check the root crontab for ntpdate entries.
# crontab -l | grep ntpdate
If the ntpdate command is invoked with NTP servers outside of the enclave, this is a finding.

Check the NTP daemon configuration.
# grep '^server' /etc/inet/ntp.conf
If an NTP server is listed outside of the enclave, this is a finding.
Fix Text (F-23457r1_fix)
If using ntpdate, remove NTP servers that are external to the enclave from the cron job running ntpdate.

If using the NTP daemon, remove the server line from /etc/inet/ntp.conf for each NTP server that is external to the enclave.