Skip to content

2.1.3.2 Ensure systemd-timesyncd is enabled and running

Audit#

IF systemd-timesyncd is in use on the system, run the following commands:

Run the following command to verify that the systemd-timesyncd service is enabled: 

# systemctl is-enabled systemd-timesyncd.service
enabled

Run the following command to verify that the systemd-timesyncd service is active: 

# systemctl is-active systemd-timesyncd.service
active

Remediation#

IF systemd-timesyncd is in use on the system, run the following commands:

Run the following command to unmask systemd-timesyncd.service: 

# systemctl unmask systemd-timesyncd.service

Run the following command to enable and start systemd-timesyncd.service: 

# systemctl --now enable systemd-timesyncd.service

OR

If another time synchronization service is in use on the system, run the following command to stop and mask systemd-timesyncd: 

# systemctl --now mask systemd-timesyncd.service