{"description": "System time should be synchronized between all systems in an environment. This is\ntypically done by establishing an authoritative time server or set of servers and having all\nsystems synchronize their clocks to them.\nThe <code>chrony</code> package can be installed with the following command:\n<pre>\n$ apt-get install chrony</pre>", "rationale": "Time synchronization is important to support time sensitive security mechanisms like\nKerberos and also ensures log files have consistent time records across the enterprise,\nwhich aids in forensic investigations.", "severity": "medium", "references": {"ospp": ["FMT_SMF_EXT.1"], "pcidss": ["Req-10.4"], "srg": ["SRG-OS-000355-GPOS-00143"], "anssi": ["R71"], "cis": ["2.3.1.1"], "ism": ["0988", "1405"], "pcidss4": ["10.6.1", "10.6"], "stigid": ["UBTU-22-215015"], "stigref": ["SV-260479r991589_rule"]}, "control_references": {"anssi": ["R71"], "cis": ["2.3.1.1"], "ism": ["0988", "1405"], "pcidss4": ["10.6.1", "10.6"], "stigid": ["UBTU-22-215015"]}, "components": [], "identifiers": {}, "ocil_clause": "the package is not installed", "ocil": " Run the following command to determine if the <code>chrony</code> package is installed: <pre>$ dpkg -l  chrony</pre>", "oval_external_content": null, "fixtext": "The <code>chrony</code> package can be installed with the following command: <pre> $ apt-get install chrony</pre>", "checktext": "", "vuldiscussion": "", "srg_requirement": " Ubuntu 22.04 must have the chrony package installed.", "warnings": [], "conflicts": [], "requires": [], "policy_specific_content": {"stig": {"srg_requirement": "Ubuntu 22.04 must have the chrony package installed.", "vuldiscussion": "Inaccurate time stamps make it more difficult to correlate events and can lead to an inaccurate analysis. Determining the correct time a particular event occurred on a system is critical when conducting forensic analysis and investigating system events. Sources outside the configured acceptable allowance (drift) may be inaccurate.", "checktext": "Verify that Ubuntu 22.04 has the chrony package installed with the following command:\n\n$ dnf list --installed chrony\n\nExample output:\n\nchrony.x86_64          4.1-3.el9\n\nIf the \"chrony\" package is not installed, this is a finding.", "fixtext": "The chrony package can be installed with the following command:\n\n$ sudo dnf install chrony"}}, "platform": null, "platforms": [], "sce_metadata": {}, "inherited_platforms": ["system_with_kernel"], "cpe_platform_names": [], "inherited_cpe_platform_names": ["system_with_kernel"], "bash_conditional": null, "fixes": {}, "title": "The Chrony package is installed", "definition_location": "/aptdata/openscap/scap-security-guide/linux_os/guide/services/ntp/package_chrony_installed/rule.yml", "template": {"name": "package_installed_guard_var", "vars": {"pkgname": "chrony", "variable": "var_timesync_service", "value": "chronyd"}, "backends": {}}}