Skip to content

2.1.2.3 Ensure chrony is enabled and running

Audit#

IF chrony is in use on the system, run the following commands:

Run the following command to verify that the chrony service is enabled: 

# systemctl is-enabled chrony.service
enabled

Run the following command to verify that the chrony service is active: 

# systemctl is-active chrony.service
active

Remediation#

IF chrony is in use on the system, run the following commands:

Run the following command to unmask chrony.service: 

# systemctl unmask chrony.service

Run the following command to enable and start chrony.service: 

# systemctl --now enable chrony.service

OR

If another time synchronization service is in use on the system, run the following command to remove chrony: 

# apt purge chrony