ovh / debian-cis

PCI-DSS compliant Debian 10/11/12 hardening
Other
757 stars 130 forks source link

FIX(2.2.1.4): Validate debian default ntp config #118

Closed sblaisot closed 3 years ago

sblaisot commented 3 years ago

CIS benchmark states in §2.2.1.4 that ntp config should contain

restrict -4 default kod nomodify notrap nopeer noquery

However, debian's default config file has

restrict -4 default kod notrap nomodify nopeer noquery limited

Which is the exact same flags (with the addition of limited) but in a different order.

So debian default ntp configuration is compliant with this CIS rule but check fails.

This PR also validate NTP configuration with debian default flag order