documentation_complete: true

title: 'Install the ntp service'

description: 'The ntpd service should be installed.'

rationale: 'Time synchronization (using NTP) is required by almost all network and administrative tasks (syslog, cryptographic based services (authentication, etc.), etc.). Ntpd is regularly maintained and updated, supporting security features such as RFC 5906.'

severity: high

identifiers:
    cce@sle12: CCE-91656-9
    cce@sle15: CCE-91293-1

references:
    cis-csc: 1,14,15,16,3,5,6
    cobit5: APO11.04,BAI03.05,DSS05.04,DSS05.07,MEA02.01
    isa-62443-2009: 4.3.3.3.9,4.3.3.5.8,4.3.4.4.7,4.4.2.1,4.4.2.2,4.4.2.4
    isa-62443-2013: 'SR 2.10,SR 2.11,SR 2.12,SR 2.8,SR 2.9'
    iso27001-2013: A.12.4.1,A.12.4.2,A.12.4.3,A.12.4.4,A.12.7.1
    nist: CM-6(a)
    nist-csf: PR.PT-1
    pcidss: Req-10.4

ocil_clause: 'the package is not installed'

ocil: |-
  {{% if product == "debian13" %}}
  {{{ ocil_package(package="ntpsec") }}}
  {{% else %}}
  {{{ ocil_package(package="ntp") }}}
  {{% endif %}}
  
template:
    name: package_installed
    vars:
        pkgname: ntp
        pkgname@debian13: ntpsec
