GEN000244 - The system must use time sources local to the enclave.

Information

A synchronized system clock is critical for the enforcement of time-based policies and the correlation of logs and audit records with other systems. The network architecture should provide multiple time servers within an enclave providing local service to the enclave and synchronize with time sources outside of the enclave.

If this server is an enclave time server, this requirement is not applicable.

If the system is completely isolated (i.e., it has no connections to networks or other systems), time synchronization is not required as no correlation of events or operation of time-dependent protocols between systems will be necessary. If the system is completely isolated, this requirement is not applicable.

Solution

If using 'ntpd -qg', remove NTP servers external to the enclave from the cron job running 'ntpd -qg'.

If using the NTP daemon, remove the 'server' line from /etc/ntp.conf for each NTP server external to the enclave.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_5_V2R1_STIG.zip

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-8(1), 800-53|AU-8(1)(a), CAT|III, CCI|CCI-000160, CCI|CCI-001492, CCI|CCI-001891, Rule-ID|SV-218196r603259_rule, STIG-ID|GEN000244, STIG-Legacy|SV-63153, STIG-Legacy|V-22292, Vuln-ID|V-218196

Plugin: Unix

Control ID: 0d5f0e95a028ab347c11cd667fe29359462030b711f74169defed8c779d07ea2