content
content copied to clipboard
chronyd_or_ntpd_set_maxpoll does not check pools
Description of problem:
Rule chronyd_or_ntpd_set_maxpoll check if all time sources in /etc/chrony.conf specified by server keyword have maxpoll option set. However, it doesn't check sources specified as pool or other possible sources. A pool seems to be the default option on RHEL 8, at least on my fresh installation there is no server specified.
SCAP Security Guide Version:
current upstream head as of 7075c11504dba2d18dad33e08ca5e92e97077fc1
Operating System Version:
RHEL 8
Steps to Reproduce:
- configure pool in
/etc/chrony.confinstead of server - evaluate chronyd_or_ntpd_set_maxpoll
Actual Results:
maxpoll is checked only on lines starting with server
Expected Results:
Investigate if it should check also on pool or other sources.
Addition Information/Debugging Steps:
I believe this is already fixed. Could you confirm @jan-cerny?
It seems that this still might be an issue.