Check: GEN000244
Solaris 10 X86 STIG:
GEN000244
(in versions v2 r4 through v1 r17)
Title
The system must use time sources local to the enclave. (Cat III impact)
Discussion
A synchronized system clock is critical for the enforcement of time-based policies and the correlation of logs and audit records with other systems. The network architecture should provide multiple time servers within an enclave that provide local service to the enclave and synchronize with time sources outside of the enclave. If this server is an enclave time server, this requirement is not applicable. If the system is completely isolated (no connections to networks or other systems), time synchronization is not required as no correlation of events or operation of time-dependent protocols between systems will be necessary. If the system is completely isolated, this requirement is not applicable.
Check Content
Determine the zone that you are currently securing. # zonename If the command output is not "global", this is not applicable. Check the NTP daemon configuration. # grep '^server' /etc/inet/ntp.conf If an NTP server is listed outside of the enclave, this is a finding.
Fix Text
Remove the server line from /etc/inet/ntp.conf for each NTP server that is external to the enclave.
Additional Identifiers
Rule ID: SV-227563r877038_rule
Vulnerability ID: V-227563
Group Title: SRG-OS-000355
Expert Comments
CCIs
| Number | Definition |
|---|---|
| CCI-001891 |
The information system compares internal information system clocks on an organization-defined frequency with an organization-defined authoritative time source. |
Controls
| Number | Title |
|---|---|
| AU-8 (1) |
Synchronization With Authoritative Time Source |