Free DISA STIG and SRG Library | Vaulted

V-70515

The storage system must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).

Finding ID
HP3P-32-001701
Rule ID
SV-85137r1_rule
Severity
Cat III
CCE
(None)
Group Title
SRG-OS-000359-GPOS-00146
CCI
CCI-001890
Target Key
(None)
Documentable
No
Discussion

If time stamps are not consistently applied and there is no common time reference, it is difficult to perform forensic analysis. Time stamps generated by the operating system include date and time. Time is commonly expressed in UTC, a modern continuation of GMT, or local time with an offset from UTC.

Fix Text

Configure the "Timezone" field by first identifying the time zone identifier. Enter the command to list available time zone settings: cli% setdate -tzlist If UTC is to be set, then use the following command: cli% setdate -tz Etc/UTC

Check Content

Verify the "Timezone" field is configured by entering the following command: cli% showdate Node Date 0 2016-05-18 23:46:29 UTC (Etc/UTC) 1 2016-05-18 23:46:37 UTC (Etc/UTC) If the output does not match the required time zone, this is a finding.