1. Home
  2. Security Hardening
  3. CIS Apple OSX 10.11 El Capitan L1 V1.1.0
  4. Restrict NTP server to loopback interface – restrict lo

Restrict NTP server to loopback interface – restrict lo

Details

Mobile workstations on untrusted networks should not have open listening services

available to other nodes on the network.

Solution

Perform the following to implement the prescribed state –
1. Run the following command in Terminal-sudo vim /etc/ntp-restrict.conf
2. Add the following lines to the filerestrict lo interface ignore wildcard interface listen lo

Supportive Information

The following resource is also helpful.

This security hardening control applies to the following category of controls within NIST 800-53: System and Communications Protection.This control applies to the following type of system Unix.

References

Source

Updated on July 16, 2022
Was this article helpful?

Related Articles