mediumservicesverified ✓rollback-safe
Ensure chrony is configured
chrony-sources · RHEL ≥ 8 · 1 impl
Description
Chrony must be configured with authoritative time sources.
Rationale
Without reliable time sources, system clocks may drift, compromising log accuracy and time-based security controls.
Check → Remediate
Checkcommand
chronyc sources 2>/dev/null | grep -E '^\^' | head -1
- expected_exit:
- 0
Remediateconfig_set_dropin
- dir:
- /etc/chrony.d
- file:
- 00-kensa-sources.conf
- key:
- pool
- value:
- {{ chrony_ntp_pool }}
- restart:
- chronyd
Framework references
CIS
rhel9 2.3.2rhel10 2.3.2rhel8 2.3.2
STIG
V-230484
NIST 800-53
AU-8
Live verification
rhel10:checkrhel8:checkrhel9:check
#chrony#ntp#time