The system clock must be synchronized continuously, or at least daily.

From Solaris 10 SPARC Security Technical Implementation Guide

Associated with IA controls: ECSC-1

Associated with: CCI-000366

SV-26291r1_rule The system clock must be synchronized continuously, or at least daily.

Vulnerability discussion

A synchronized system clock is critical for the enforcement of time-based policies and the correlation of logs and audit records with other systems. Internal system clocks tend to drift and require periodic resynchronization to ensure their accuracy. Software, such as NTPD, can be used to continuously synchronize the system clock with authoritative sources. Alternatively, the system may be synchronized periodically, with a maximum of one day between synchronizations.If the system is completely isolated (no connections to networks or other systems), time synchronization is not required as no correlation of events or operation of time-dependent protocols between systems will be necessary. If the system is completely isolated, this requirement is not applicable.

Check content

Fix text

Enable the NTP daemon for continuous synchronization. svcadm enable ntp OR Add a daily or more frequent cronjob to perform synchronization using ntpdate.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.