Skip to content

Remove chrony_set_nts from STIG profiles #14613

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Mab879 merged 1 commit into from
Apr 3, 2026
Merged

Remove chrony_set_nts from STIG profiles #14613

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 0 additions & 1 deletion controls/srg_gpos/SRG-OS-000480-GPOS-00227.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,8 +1,8 @@
controls:
- id: SRG-OS-000480-GPOS-00227

Check failure on line 2 in controls/srg_gpos/SRG-OS-000480-GPOS-00227.yml

View workflow job for this annotation

GitHub Actions / Yaml Lint on Changed Controls and Profiles Files 

2:8 [hyphens] too many spaces after hyphen
levels:
- medium
title: {{{ full_name }}} must be configured in accordance with the security configuration

Check failure on line 5 in controls/srg_gpos/SRG-OS-000480-GPOS-00227.yml

View workflow job for this annotation

GitHub Actions / Yaml Lint on Changed Controls and Profiles Files 

5:34 syntax error: expected <block end>, but found '<scalar>' (syntax)

Check failure on line 5 in controls/srg_gpos/SRG-OS-000480-GPOS-00227.yml

View workflow job for this annotation

GitHub Actions / Yaml Lint on Changed Controls and Profiles Files 

5:29 [braces] too many spaces inside braces

Check failure on line 5 in controls/srg_gpos/SRG-OS-000480-GPOS-00227.yml

View workflow job for this annotation

GitHub Actions / Yaml Lint on Changed Controls and Profiles Files 

5:19 [braces] too many spaces inside braces
settings based on DoD security configuration or implementation guidance, including
STIGs, NSA configuration guides, CTOs, and DTMs.
rules:
Expand Down Expand Up @@ -245,7 +245,6 @@
- display_login_attempts
- installed_OS_is_vendor_supported
- selinux_all_devicefiles_labeled
- chrony_set_nts
- tftp_uses_secure_mode_systemd
- grub2_pti_argument
- chronyd_client_only
Expand Down
7 changes: 7 additions & 0 deletions linux_os/guide/services/ntp/chrony_set_nts/rule.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,3 +25,10 @@ severity: medium

platforms:
- package[chrony]

warnings:
- general: |-
Network Time Security (NTS) is not compatible with systems running in FIPS mode.
Enabling NTS on a system in FIPS mode causes chronyd service to abort with a fatal
error. This is because NTS uses algorithms (specifically SIV cipher) that are not
approved by NIST and are not compliant with FIPS.
1 change: 1 addition & 0 deletions products/rhel10/profiles/default.profile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -46,3 +46,4 @@ selections:
- sshd_use_strong_macs
- configure_ssh_crypto_policy
- package_dnsmasq_removed
- chrony_set_nts
1 change: 0 additions & 1 deletion tests/data/profile_stability/rhel10/stig.profile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -147,7 +147,6 @@ auditd_overflow_action
auditd_write_logs
banner_etc_issue
bios_enable_execution_restrictions
chrony_set_nts
chronyd_client_only
chronyd_no_chronyc_network
chronyd_or_ntpd_set_maxpoll
Expand Down
1 change: 0 additions & 1 deletion tests/data/profile_stability/rhel10/stig_gui.profile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -147,7 +147,6 @@ auditd_overflow_action
auditd_write_logs
banner_etc_issue
bios_enable_execution_restrictions
chrony_set_nts
chronyd_client_only
chronyd_no_chronyc_network
chronyd_or_ntpd_set_maxpoll
Expand Down
Loading