STIGQter: STIG Summary: Solaris 10 X86 Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 22 Jan 2021:

The system must use time sources local to the enclave.

DISA Rule

SV-227563r603266_rule

Vulnerability Number

V-227563

Group Title

SRG-OS-000355

Rule Version

GEN000244

Severity

CAT III

CCI(s)

• CCI-001891 - The information system compares internal information system clocks on an organization-defined frequency with an organization-defined authoritative time source.

Weight

10

Fix Recommendation

Remove the server line from /etc/inet/ntp.conf for each NTP server that is external to the enclave.

Check Contents

Determine the zone that you are currently securing.

# zonename

If the command output is not "global", this is not applicable.

Check the NTP daemon configuration.
# grep '^server' /etc/inet/ntp.conf
If an NTP server is listed outside of the enclave, this is a finding.

Vulnerability Number

V-227563

Documentable

False

Rule Version

GEN000244

Severity Override Guidance

Determine the zone that you are currently securing.

# zonename

If the command output is not "global", this is not applicable.

Check the NTP daemon configuration.
# grep '^server' /etc/inet/ntp.conf
If an NTP server is listed outside of the enclave, this is a finding.

Check Content Reference

M

Target Key

4061

Comments