Oracle Linux 6 Security Technical Implementation Guide

The Oracle Linux 6 Security Technical Implementation Guide (V2 R7) has 267 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

267STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R7

CurrentPublished Thu Jan 26 2023

The system clock must be synchronized to an authoritative DoD time source.

Oracle Linux 6 Security Technical Implementation Guide

Assessment Title

Rule Text

The system clock must be synchronized to an authoritative DoD time source.

Description

Discussion Text

Synchronizing with an NTP server makes it possible to collate system logs from multiple sources or correlate computer events with real time events. Using a trusted NTP server provided by your organization is recommended.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-219563

Rule

SV-219563r877038_rule

Severity

medium

Rule Version

OL6-00-000248

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

A remote NTP server should be configured for time synchronization. To verify one is configured, open the following file. 

/etc/ntp.conf

In the file, there should be a section similar to the following: 

# --- OUR TIMESERVERS -----
server [ntpserver]

If this is not the case, this is a finding.

Implementation Procedure

Fix Text

To specify a remote NTP server for time synchronization, edit the file "/etc/ntp.conf". Add or correct the following lines, substituting the IP or hostname of a remote NTP server for ntpserver. 

server [ntpserver]

This instructs the NTP software to contact that remote server to obtain time data.

STIG check 232 of 267 in the Oracle Linux 6 STIG checklist

← Previous · V-219562The system clock must be synchronized continuously, or at least daily.Next · V-219564 →The LDAP client must use a TLS connection using trust certificates signed by the site CA.