STIGQter STIGQter: STIG Summary: SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 01 Apr 2026:

SLEM 5 clock must, for networked systems, be synchronized to an authoritative DOD time source at least every 24 hours.

DISA Rule

SV-261311r1038944_rule

Vulnerability Number

V-261311

Group Title

SRG-OS-000355-GPOS-00143

Rule Version

SLEM-05-252010

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

SLEM 5 clock must be configured to synchronize to an authoritative DOD time source when the time difference is greater than one second.

To configure the system clock to synchronize to an authoritative DOD time source at least every 24 hours, edit the file "/etc/chrony.conf". Add or correct the following lines by replacing "<time_source>" with an authoritative DOD time source:

server <time_source> maxpoll 16

Check Contents

Verify that SLEM 5 clock must be configured to synchronize to an authoritative DOD time source when the time difference is greater than one second with the following command:

> sudo grep maxpoll /etc/chrony.conf
server 0.us.pool.ntp.mil maxpoll 16

If the "server" parameter is not set to an authoritative DOD time source, "maxpoll" is greater than "16", the line is commented out, or the line is missing, this is a finding.

Vulnerability Number

V-261311

Documentable

False

Rule Version

SLEM-05-252010

Severity Override Guidance

Verify that SLEM 5 clock must be configured to synchronize to an authoritative DOD time source when the time difference is greater than one second with the following command:

> sudo grep maxpoll /etc/chrony.conf
server 0.us.pool.ntp.mil maxpoll 16

If the "server" parameter is not set to an authoritative DOD time source, "maxpoll" is greater than "16", the line is commented out, or the line is missing, this is a finding.

Check Content Reference

M

Target Key

5596