From 30ce626fcb38b91dd6e210f6edaa2e10fb87133e Mon Sep 17 00:00:00 2001 From: Bob Gendler Date: Wed, 21 Jul 2021 16:20:46 -0400 Subject: [PATCH] added baseline tags --- rules/os/os_time_server_enabled.yaml | 5 +++++ rules/sysprefs/sysprefs_time_server_configure.yaml | 3 +++ rules/sysprefs/sysprefs_time_server_enforce.yaml | 3 +++ 3 files changed, 11 insertions(+) diff --git a/rules/os/os_time_server_enabled.yaml b/rules/os/os_time_server_enabled.yaml index a3c8b647..ccca9d64 100644 --- a/rules/os/os_time_server_enabled.yaml +++ b/rules/os/os_time_server_enabled.yaml @@ -2,6 +2,8 @@ id: os_time_server_enabled title: "Enable Time Synchronization Daemon" discussion: | The macOS time synchronization daemon (timed) _MUST_ be enabled for proper time synchronization to an authorized time server. + + NOTE: The time synchronization daemon is enabled by default on macOS. check: | /bin/launchctl list | /usr/bin/grep -c com.apple.timed result: @@ -34,6 +36,9 @@ macOS: tags: - 800-171 - cnssi-1253 + - 800-53r5_low + - 800-53r5_moderate + - 800-53r5_high - 800-53r4_moderate - 800-53r4_high - stig diff --git a/rules/sysprefs/sysprefs_time_server_configure.yaml b/rules/sysprefs/sysprefs_time_server_configure.yaml index 3f92d9ea..5aaae6e6 100644 --- a/rules/sysprefs/sysprefs_time_server_configure.yaml +++ b/rules/sysprefs/sysprefs_time_server_configure.yaml @@ -33,6 +33,9 @@ macOS: tags: - 800-171 - cnssi-1253 + - 800-53r5_low + - 800-53r5_moderate + - 800-53r5_high - 800-53r4_moderate - 800-53r4_high - stig diff --git a/rules/sysprefs/sysprefs_time_server_enforce.yaml b/rules/sysprefs/sysprefs_time_server_enforce.yaml index c5bfba76..23f8b588 100644 --- a/rules/sysprefs/sysprefs_time_server_enforce.yaml +++ b/rules/sysprefs/sysprefs_time_server_enforce.yaml @@ -33,6 +33,9 @@ macOS: tags: - 800-171 - cnssi-1253 + - 800-53r5_low + - 800-53r5_moderate + - 800-53r5_high - 800-53r4_moderate - 800-53r4_high - stig