Check: GEN000244
HP-UX 11.31 STIG:
GEN000244
(in versions v1 r19 through v1 r13)
Title
The system must use time sources are local to the enclave. (Cat III impact)
Discussion
A synchronized system clock is critical for the enforcement of time-based policies and the correlation of logs and audit records with other systems. The network architecture should provide multiple time servers within an enclave providing local service to the enclave and synchronize with time sources outside of the enclave. If this server is an enclave time server, this requirement is not applicable. If the system is completely isolated (no connections to networks or other systems), time synchronization is not required as no correlation of events or operation of time-dependent protocols between systems will be necessary. If the system is completely isolated, this requirement is not applicable.
Check Content
Check the root crontab for ntpdate entries. # crontab -l | grep ntpdate If the ntpdate command is invoked with NTP servers outside of the enclave, this is a finding. Check the NTP daemon configuration. # grep "^server" ntp.conf If an NTP server is listed outside of the enclave, this is a finding.
Fix Text
If using ntpdate, remove NTP servers external to the enclave from the cron job running ntpdate. If using the NTP daemon, remove the server line from ntp.conf for each NTP server external to the enclave.
Additional Identifiers
Rule ID: SV-38298r1_rule
Vulnerability ID: V-22292
Group Title: GEN000244
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-000160 |
The information system synchronizes internal information system clocks on an organization-defined frequency with an organization-defined authoritative time source. |
Controls
Number | Title |
---|---|
No controls are assigned to this check |