STIGQter: STIG Summary: Tri-Lab Operating System Stack (TOSS) 5 Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Mar 2026:

TOSS 5 must securely compare internal information system clocks at least every 24 hours.

DISA Rule

SV-282772r1201296_rule

Vulnerability Number

V-282772

Group Title

SRG-OS-000785-GPOS-00250

Rule Version

TOSS-05-000082

Severity

CAT II

CCI(s)

CCI-004922 - Synchronize system clocks within and between systems or system components.

Weight

Fix Recommendation

Configure TOSS 5 to securely compare internal information system clocks at least every 24 hours with an appropriate NTP server by adding/modifying the following line in the "/etc/chrony.conf file":

server [ntp.server.name] iburst maxpoll 16

Check Contents

Verify TOSS 5 is securely comparing internal information system clocks at least every 24 hours with an NTP server with the following commands:

$ sudo grep maxpoll /etc/chrony.conf

server 0.us.pool.ntp.mil iburst maxpoll 16

If the "maxpoll" option is set to a number greater than 16 or the line is commented out, this is a finding.

Verify the "chrony.conf" file is configured to an authoritative DOD or other U.S. Government time source using the following command:

$ sudo grep -i server /etc/chrony.conf
server 0.us.pool.ntp.mil

If the parameter "server" is not set or is not set to an authoritative DOD or other U.S. Government time source, this is a finding.

Vulnerability Number

V-282772

Documentable

False

Rule Version

TOSS-05-000082

Severity Override Guidance

Check Content Reference

Target Key

5738