5.1.1 Ensure cron daemon is enabled and running - running

Information

The cron daemon is used to execute batch jobs on the system.

Note: Other methods, such as systemd timers, exist for scheduling jobs. If another method is used, cron should be removed, and the alternate method should be secured in accordance with local site policy

Rationale:

While there may not be user jobs that need to be run on the system, the system does have maintenance jobs that may include security monitoring that have to run, and cron is used to execute them.

Solution

Run the following command to enable and start cron:

# systemctl --now enable cron

See Also

https://workbench.cisecurity.org/files/2920

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-6, CSCv6|9.1, CSCv7|6

Plugin: Unix

Control ID: ac0eb040258c29355742dcd79292f202c6848e21883a9bae76ba7ed5d45cb7f1