BaselineWatch
Desk

system_settings_time_server_enforce Enforce macOS Time Synchronization

NIST macOS Security Compliance Project Sequoia Guidance, Revision 4.0 (be5491f)
All changes in this version
first version loaded System Settings

Title

Enforce macOS Time Synchronization

Control

/usr/bin/osascript -l JavaScript << EOS
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.timed')\
.objectForKey('TMAutomaticTimeOnlyEnabled').js
EOS

Discussion

Time synchronization _MUST_ be enforced on all networked systems.

This rule ensures the uniformity of time stamps for information systems with multiple system clocks and systems connected over a network.

Related controls

au-12.1, sc-45.1

Fix

This is implemented by a Configuration Profile.