2.1.3.2 Ensure systemd-timesyncd is enabled and running

Information

systemd-timesyncd is a daemon that has been added for synchronizing the system clock across the network

systemd-timesyncd needs to be enabled and running in order to synchronize the system to a timeserver.

Time synchronization is important to support time sensitive security mechanisms and to ensure log files have consistent time records across the enterprise to aid in forensic investigations

Solution

IF systemd-timesyncd is in use on the system, run the following commands:

Run the following command to unmask systemd-timesyncd.service :

# systemctl unmask systemd-timesyncd.service

Run the following command to enable and start systemd-timesyncd.service :

# systemctl --now enable systemd-timesyncd.service

OR

If another time synchronization service is in use on the system, run the following command to stop and mask systemd-timesyncd :

# systemctl --now mask systemd-timesyncd.service

See Also

https://workbench.cisecurity.org/benchmarks/13775

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-7, 800-53|AU-8, CSCv7|6.1

Plugin: Unix

Control ID: ecfdba594153002b40638d936ecdb62513b13c8a3b8019c8b5304d145a9298fa