{"description": "The system must have exactly one active time synchronization service to avoid conflicts\nand ensure consistent time synchronization. Only one of the following services should be\nenabled and active at any time:\n<ul>\n    <li>chrony - A versatile NTP implementation</li>\n    <li>systemd-timesyncd - A lightweight NTP client</li>\n</ul>\nHaving zero active time synchronization services leaves the system without accurate\ntime synchronization, while having multiple active services can lead to unexpected and\nunreliable results.", "rationale": "Running multiple time synchronization services simultaneously can lead to conflicts\nin time synchronization, unpredictable behavior, and unreliable results. A single service\nensures consistent and accurate time synchronization.\n\nHaving no active time synchronization service leaves the system without accurate\ntime synchronization, which can affect security mechanisms, log consistency, and forensic\ninvestigations.", "severity": "medium", "references": {"cis": ["2.3.1.1"]}, "control_references": {"cis": ["2.3.1.1"]}, "components": [], "identifiers": {}, "ocil_clause": null, "ocil": null, "oval_external_content": null, "fixtext": "", "checktext": "", "vuldiscussion": "", "srg_requirement": "", "warnings": [{"general": "This rule does not come with a remediation. There are specific rules\nfor enabling each time synchronization service, which should be used instead."}], "conflicts": [], "requires": [], "policy_specific_content": {}, "platform": "machine", "platforms": ["machine"], "sce_metadata": {}, "inherited_platforms": ["system_with_kernel"], "cpe_platform_names": ["machine"], "inherited_cpe_platform_names": ["system_with_kernel"], "bash_conditional": null, "fixes": {}, "title": "Ensure a Single Time Synchronization Service is in Use", "definition_location": "/aptdata/openscap/scap-security-guide/linux_os/guide/services/ntp/ntp_single_service_active/rule.yml", "template": null}