search

florianutz / ubuntu2004_cis

Ubuntu CIS Hardening Ansible Role
MIT License
108 stars 67 forks source link

2.2.1.3 | PATCH | Ensure chrony is configured -> Failed #27

Closed munish07 closed 2 years ago

munish07 commented 3 years ago

Describe the bug 2.2.1.3 | PATCH | Ensure chrony is configured -> Failed

As per the documentation, /etc/chrony/chrony.conf should be updated to add a line "user _chrony". The ansible playbook is not doing that. Editing the file manually and adding that file solves the failures. Ansible playbook should be updated to fix that.

Expected behavior 2.2.1.3 should Pass

Software (please complete the following information):

Additional context Add any other context about the problem here.

kdebisschop commented 2 years ago

Related to this, I think...

/etc/sysconfig/chronyd inserts a line "OPTIONS=\"-u chrony\"" -- but on ubuntu 18 and 20, the user is "_chrony"

Easy to patch -- not sure if it is just a typo or should be configurable.

I'm going to make a PR for "SCORED | 2.2.1.3 | PATCH | Ensure chrony is configured | modify /etc/sysconfig/chronyd" assuming it should be configurable.

florianutz commented 2 years ago

Closed by #39