STIGQter: STIG Summary: Solaris 10 X86 Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 22 Jan 2021:

The system clock must be synchronized to an authoritative DoD time source.

DISA Rule

SV-227560r603266_rule

Vulnerability Number

V-227560

Group Title

SRG-OS-000355

Rule Version

GEN000240

Severity

CAT II

CCI(s)

• CCI-001891 - The information system compares internal information system clocks on an organization-defined frequency with an organization-defined authoritative time source.

Weight

10

Fix Recommendation

Use a local authoritative time server synchronizing to an authorized DoD time source. Ensure all systems in the facility feed from one or more local time servers that feed from the authoritative time server.

Check Contents

NTP must be used and used only in the global zone. Determine the zone that you are currently securing.

# zonename

If the command output is not "global", NTP must be disabled. Check the system for a running NTP daemon.

# svcs ntp | grep online

If the output from "zonename" is "global", NTP must be enabled. Check the system for a running NTP daemon.

# svcs ntp | grep online

If NTP is not online, this is a finding.

If NTP is running confirm the servers and peers or multicast client (as applicable) are local or an authoritative U.S. DoD source.

# more /etc/inet/ntp.conf

If a non-local/non-authoritative (U.S. DoD source) time-server is used, this is a finding.

Vulnerability Number

V-227560

Documentable

False

Rule Version

GEN000240

Severity Override Guidance

NTP must be used and used only in the global zone. Determine the zone that you are currently securing.

# zonename

If the command output is not "global", NTP must be disabled. Check the system for a running NTP daemon.

# svcs ntp | grep online

If the output from "zonename" is "global", NTP must be enabled. Check the system for a running NTP daemon.

# svcs ntp | grep online

If NTP is not online, this is a finding.

If NTP is running confirm the servers and peers or multicast client (as applicable) are local or an authoritative U.S. DoD source.

# more /etc/inet/ntp.conf

If a non-local/non-authoritative (U.S. DoD source) time-server is used, this is a finding.

Check Content Reference

M

Target Key

4061

Comments