← All control domains
Time synchronization: 1 control for Linux hardening
Pavois audits 1 control in the Time synchronization hardening domain, across 9 systems and 5 standards (CIS, ANSSI BP-028, NIST 800-53, PCI DSS, DISA STIG). Every control declares the evidence it gathers, its severity, its remediation and its standard references.
This domain is thinly covered by Pavois today, see the Coverage page.
The domain in figures
| Controls | 1 |
| Severities | |
| Evidence gathered | |
| Standards | |
| Systems | Debian 12Debian 13FedoraRHEL 10 / Rocky 10 / AlmaLinux 10RHEL 8 / Rocky 8 / AlmaLinux 8RHEL 9 / Rocky 9 / AlmaLinux 9Ubuntu 22.04Ubuntu 24.04Ubuntu 26.04 |
| Coverage depth | shallow |
What does Pavois check in this domain?
- effective runtime 1
- Checked against the resolved running state (e.g. sshd -T, sysctl, systemctl show), catches drop-ins and Includes a file read would miss. Caveat: runtime ≠ persistence; a value correct now may not survive a reboot.
Which standards does this domain cover?
One effective-configuration check serves as evidence for several standards at once. The references below are the ones the corpus actually carries, never a claimed equivalence. how to read a standard mapping.
- CIS
- 2.3.1, 2.3.1.1, 2.3.2
- ANSSI BP-028
- R71
- NIST 800-53
- 3.3.7, SC-45
- PCI DSS
- 10.6.1
- DISA STIG
- UBTU-22-215020, UBTU-24-100010
The Time synchronization control
| Ref | Rule | Sev. | OS | Standards |
|---|---|---|---|---|
| SOCLE-RUN-NTP-001 | A time-synchronization service is active | medium | 9 |