{"description": "Synchronizing internal information system clocks provides uniformity\nof time stamps for information systems with multiple system clocks and\nsystems connected over a network.", "rationale": "Inaccurate time stamps make it more difficult to correlate events and\ncan lead to an inaccurate analysis. Determining the correct time a\nparticular event occurred on a system is critical when conducting\nforensic analysis and investigating system events.", "severity": "medium", "references": {"srg": ["SRG-OS-000356-GPOS-00144"], "stigid": ["UBTU-22-252015"], "stigref": ["SV-260520r1044776_rule"]}, "control_references": {"stigid": ["UBTU-22-252015"]}, "components": [], "identifiers": {}, "ocil_clause": "", "ocil": "Verify the operating system synchronizes internal system clocks to the\nauthoritative time source when the time difference is greater than one\nsecond. Check the value of \"makestep\" by running the following command:\n<pre>$ sudo grep makestep /etc/chrony/chrony.conf\nmakestep 1 -1</pre>\n\nIf it is not set to the above value, edit the /etc/chrony/chrony.conf file\nand add:\n<pre>makestep 1 -1</pre>\nRestart the chrony service:\n<pre>$ sudo systemctl restart chrony.service</pre>", "oval_external_content": null, "fixtext": "", "checktext": "", "vuldiscussion": "", "srg_requirement": "", "warnings": [], "conflicts": [], "requires": [], "policy_specific_content": {}, "platform": "package[chrony]", "platforms": ["package[chrony]"], "sce_metadata": {}, "inherited_platforms": ["system_with_kernel"], "cpe_platform_names": ["package_chrony"], "inherited_cpe_platform_names": ["system_with_kernel"], "bash_conditional": null, "fixes": {}, "title": "Synchronize internal information system clocks", "definition_location": "/aptdata/openscap/scap-security-guide/linux_os/guide/services/ntp/chronyd_sync_clock/rule.yml", "template": {"name": "key_value_pair_in_file", "vars": {"key": "makestep", "value": "1 -1", "sep": " ", "sep_regex": " ", "path": "/etc/chrony/chrony.conf"}, "backends": {}}}