ovh/debian-cis

Script 2.2.1.1_use_time_sync not checking for systemd-timesyncd

thejandg opened this issue · 2 comments

/bin/hardening/2.2.1.1_use_time_sync.sh is failing on my debian 11 even though I have systemd-timesyncd installed.

According to the CIS Benchmark for Debian 10 and 11, systemd-timesyncd is one of the approved daemons for synchronizing time.

Description:
System time should be synchronized between all systems in an environment. This is
typically done by establishing an authoritative time server or set of servers and having
all systems synchronize their clocks to them.

Audit:
On physical systems, and virtual systems where host based time synchronization is not
available.
One of the three time synchronization daemons should be available; chrony, systemd-timesyncd, or ntp

Created pull request #190 for this fix

PR is merged into master