CCE-92133-8Platform: Amazon Linux | Date: (C)2018-10-29 (M)2022-10-10 |
Disable ntpdate Service (ntpdate)
The 'ntpdate' service sets the local hardware clock by polling NTP servers
when the system boots. It synchronizes to the NTP servers listed in
'/etc/ntp/step-tickers' or '/etc/ntp.conf'
and then sets the local hardware clock to the newly synchronized
system time.
The 'ntpdate' service can be disabled with the following command:
'$ sudo systemctl disable ntpdate'
Parameter:
Technical Mechanism:
The 'ntpdate' service may only be suitable for systems which
are rebooted frequently enough that clock drift does not cause problems between
reboots. In any event, the functionality of the ntpdate service is now
available in the ntpd program and should be considered deprecated.
Fix:
No Remediation Info
CCSS Severity: | CCSS Metrics: |
CCSS Score : | Attack Vector: |
Exploit Score: | Attack Complexity: |
Impact Score: | Privileges Required: |
Severity: | User Interaction: |
Vector: | Scope: |
| Confidentiality: |
| Integrity: |
| Availability: |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:48320 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:48798 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:48320 |