STIGQter: STIG Summary: Oracle Linux 8 Security Technical Implementation Guide Version: 2 Release: 9 Benchmark Date: 01 Jul 2026:

OL 8 must compare internal information system clocks at least every 24 hours with a server synchronized to an authoritative time source, such as the United States Naval Observatory (USNO) time servers, or a time server designated for the appropriate DOD network (NIPRNet/SIPRNet), and/or the Global Positioning System (GPS).

DISA Rule

SV-248820r1038944_rule

Vulnerability Number

V-248820

Group Title

SRG-OS-000355-GPOS-00143

Rule Version

OL08-00-030740

Severity

CAT II

CCI(s)

• CCI-001890 - Record time stamps for audit records that use Coordinated Universal Time, have a fixed local time offset from Coordinated Universal Time, or that include the local time offset as part of the time stamp.
• CCI-004923 - Compare the internal system clocks on an organization-defined frequency with organization-defined authoritative time source.
• CCI-004926 - Synchronize the internal system clocks to the authoritative time source when the time difference is greater than organization-defined time period.

Weight

10

Fix Recommendation

Configure OL 8 to compare internal information system clocks at least every 24 hours with an NTP server by adding/modifying the following line in the "/etc/chrony.conf" file.

server [ntp.server.name] iburst maxpoll 16

Check Contents

Verify OL 8 is comparing internal information system clocks at least every 24 hours with an NTP server with the following command:

$ sudo grep maxpoll /etc/chrony.conf

server [ntp.server.name] iburst maxpoll 16

If the "maxpoll" option is set to a number greater than "16" or the line is commented out, this is a finding.

Vulnerability Number

V-248820

Documentable

False

Rule Version

OL08-00-030740

Severity Override Guidance

Verify OL 8 is comparing internal information system clocks at least every 24 hours with an NTP server with the following command:

$ sudo grep maxpoll /etc/chrony.conf

server [ntp.server.name] iburst maxpoll 16

If the "maxpoll" option is set to a number greater than "16" or the line is commented out, this is a finding.

Check Content Reference

M

Target Key

5416