STIGQter: STIG Summary: Red Hat Enterprise Linux 10 Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

RHEL 10 must enable the chronyd service.

DISA Rule

SV-280959r1165232_rule

Vulnerability Number

V-280959

Group Title

SRG-OS-000355-GPOS-00143

Rule Version

RHEL-10-200541

Severity

CAT II

CCI(s)

CCI-004923 - Compare the internal system clocks on an organization-defined frequency with organization-defined authoritative time source.

Weight

Fix Recommendation

Configure RHEL 10 to enable the chronyd service with the following command:

$ sudo systemctl enable --now chronyd

Check Contents

Verify RHEL 10 sets the chronyd service to active with the following command:

$ systemctl is-active chronyd
active

If the chronyd service is not active, this is a finding.

Vulnerability Number

V-280959

Documentable

False

Rule Version

RHEL-10-200541

Severity Override Guidance

Verify RHEL 10 sets the chronyd service to active with the following command:

$ systemctl is-active chronyd
active

If the chronyd service is not active, this is a finding.

Check Content Reference

Target Key

5733