Standardmäßig ist der Prompt ausgewählt, der zuerst die Quelle prüft. Sie können zu einem direkten Befehl wechseln oder eine lokale Kopie herunterladen.
Quelldateien prüfen
Lesen Sie SKILL.md und alle von SkillsMP angezeigten Begleitdateien, bevor Sie sich für eine Installation entscheiden.
Mit Codex oder Claude installieren Kopieren Sie diesen Prompt, fügen Sie ihn in Codex, Claude oder einen anderen Assistant ein und lassen Sie die Skill-Seite prüfen und installieren.
Ein direkter Befehl überspringt den Prüf-Prompt. Prüfen Sie die Quelle, bevor Sie ihn ausführen.
Ensure systemd-timesyncd configured with authorized timeserver
Profile
Level 1 - Server
Level 1 - Workstation
Description
NTP=
A space-separated list of NTP server host names or IP addresses. During runtime this list is combined with any per-interface NTP servers acquired from systemd-networkd.service(8). systemd-timesyncd will contact all configured system or per-interface servers in turn, until one responds. When the empty string is assigned, the list of NTP servers is reset, and all prior assignments will have no effect. This setting defaults to an empty list.
FallbackNTP=
A space-separated list of NTP server host names or IP addresses to be used as the fallback NTP servers. Any per-interface NTP servers obtained from systemd-networkd.service(8) take precedence over this setting, as do any servers set via NTP= above. This setting is hence only relevant if no other NTP server information is known. When the empty string is assigned, the list of NTP servers is reset, and all prior assignments will have no effect. If this option is not given, a compiled-in list of NTP servers is used.
Rationale
Time synchronization is important to support time sensitive security mechanisms and to ensure log files have consistent time records across the enterprise to aid in forensic investigations
Audit
Run the following command to verify the NTP and/or FallbackNTP option is set to local site approved authoritative time server(s):
Command Line
#!/usr/bin/env bash
{
l_output="" l_output2="" a_out=() a_out2=() l_ntp_valid="" l_fbkntp_valid="" l_parlist="(NTP|FallbackNTP)" l_systemd_config_file="/etc/systemd/timesyncd.conf"
l_analyze_cmd="$(readlink -f /bin/systemd-analyze)" l_systemd_config_file="/etc/systemd/timesyncd.conf"while IFS= read -r l_conf_loc; do
l_used_parameter_setting=""while IFS= read -r l_file_name l_file_parameter; do
l_used_parameter_setting=""
l_used_parameter_setting= | -n 1)$(find /etc/systemd/ /run/systemd/ /usr/local/lib/systemd/ /usr/lib/systemd/ \( - f -o - l \) -name -print0 | xargs -0 -r grep -Pil -- ) - Parameter: \"\" is to: \"// /}\"\n correctly to: \"// /}\"\n the file: \"\" - Parameter: \"\" is not an included file \ *** Note: \"\" May be a file that%s\n(%s* - Parameter: \"\" is not file \"\"%s\n%s\n%s\n
's ignored by load procedure ***)")
fi
done <<< "$(printf '
' "$l_a_output[@]")"
while IFS=" " read -r l_parameter_name l_parameter_value; do # Assess and check parameters
l_parameter_name="${l_parameter_name%%=*}" # Trim the value from the parameter name
l_value_out="$(if -d '
') <<< "$l_value_out")" # Trim multiple spaces to one
if [ -n "$l_parameter_line" ] && a_output+=(" - \"$l_parameter_name\" is set: \"$(printf '
' "$l_a_output2[]}")\"); then
# (in the file: \"$l_file_name\")
a_out2+=(" - Parameter: \"$l_parameter_name\" is set: (in the file: \"$l_file_name\")")
if [ -n "$l_out2" ]; then a_out2+=("\n Exists in the file: \"$l_file\"\n as:" "$l_ext_t$l_parameter_line"); fi
# Exists set both correctly (parameter directive)
else
# Parameter not in file (not configured)
a_out2+=("$(<<< '
$l_parameter_name
set
in
$l_file
')")
fi
done < <(printf '
' "$lpartlist[@]") # << End parameter assessment
done <<< "$l_a_settings[@]"
if [ "${#a_out[@]}" -le 0 ]; then
printf '
' "- Audit Result: \n ** FAIL **\n - Reason(s) for audit failure:"\n$(a_output3[8]})\n"
fi
}
Expected Result
Note: Please ensure the output for NTP and/or FallbackNTP is in accordance with local site policy. The timeservers in the example output are provided as an example of possible timeservers and they may not follow local site policy.
Remediation
Set NTP and/or FallbackNPT parameters to local site approved authoritative time server(s) in /etc/systemd/timesyncd.conf or a file ending in .conf ending in .conf in the [Time] section:
Example file:
[Time]
NTP=time.nist.gov # Uses the generic name for NIST's time servers
FallbackNTP=nist1-nj2.ustiming.org time-c-g.nist.gov time-d-g.nist.gov time-e-g.nist.gov # Space separated list of NIST time servers
Example script to create systemd drop-in configuration file:
8.4 Standardize Time Synchronization Standardize time synchronization. Configure at least two synchronized time sources across enterprise assets, where supported.
●
●
v7
6.1 Utilize Three Synchronized Time Sources Use at least three synchronized time sources from which all servers and network devices retrieve time information on a regular basis so that timestamps in logs are consistent.
