Skip to content

2.3.3.3 Ensure chrony is enabled and running

Audit#

- IF - chrony is in use on the system, run the following commands:
Run the following command to verify that the chrony service is enabled: 

# systemctl is-enabled chrony.service
enabled

Run the following command to verify that the chrony service is active: 

# systemctl is-active chrony.service
active

Remediation#

- IF - chrony is in use on the system, run the following commands:
Run the following command to unmask chrony.service: 

# systemctl unmask chrony.service

Run the following command to enable and start chrony.service: 

# systemctl --now enable chrony.service

- OR -
If another time synchronization service is in use on the system, run the following command to remove chrony: 

# apt purge chrony
# apt autoremove chrony