documentation_complete: true


title: 'Enable systemd_timesyncd Service'

description: |-
    {{{ describe_service_enable(service="systemd_timesyncd") }}}

rationale: |-
    Enabling the <tt>systemd_timesyncd</tt> service ensures that this host
    uses the ntp protocol to fetch time data from a ntp server.
    Synchronizing time is essential for authentication
    services such as Kerberos, but it is also important for maintaining accurate
    logs and auditing possible security breaches.
    <br /><br />
    Additional information on Ubuntu network time protocol is
    available at
    {{{ weblink(link="https://help.ubuntu.com/lts/serverguide/NTP.html.en") }}}.

severity: high

platform: not package[chrony] and not package[ntp]

identifiers:
    cce@sle12: CCE-91659-3
    cce@sle15: CCE-91296-4

references:
    cis-csc: 1,14,15,16,3,5,6
    cis@sle12: 2.2.1.2
    cis@sle15: 2.2.1.2
    cobit5: APO11.04,BAI03.05,DSS05.04,DSS05.07,MEA02.01
    isa-62443-2009: 4.3.3.3.9,4.3.3.5.8,4.3.4.4.7,4.4.2.1,4.4.2.2,4.4.2.4
    isa-62443-2013: 'SR 2.10,SR 2.11,SR 2.12,SR 2.8,SR 2.9'
    iso27001-2013: A.12.4.1,A.12.4.2,A.12.4.3,A.12.4.4,A.12.7.1
    nist: CM-6(a),AU-8(1)(a)
    nist-csf: PR.PT-1
    pcidss: Req-10.4

ocil: |-
    {{{ ocil_service_enabled(service="systemd_timesyncd") }}}

{{%- if 'ubuntu' in product %}}
template:
    name: service_enabled_guard_var
    vars:
        packagename: systemd-timesyncd
        servicename: systemd-timesyncd
        variable: var_timesync_service
        value: systemd-timesyncd
{{%- else %}}
template:
    name: service_enabled
    vars:
        servicename: systemd-timesyncd
        packagename: systemd
{{%- endif %}}
