0007-time-zone-Host Time Zone Change¶

Rule ID¶

• 0007-time-zone

Category¶

• system

Severity¶

• warn

Compatible Versions¶

• Linux

Description¶

• Monitor host time zone changes

Scan Frequency¶

• 1 */5 * * *

Rationale¶

• Time zone settings are one of the most critical basic system configurations. If the time zone is set incorrectly, online services or applications may fail to function properly or even deny service. If the host time zone is maliciously modified, it can affect normal system operation.

Risk Items¶

• Application denial of service

Audit Procedure¶

• Verify whether the host time zone has been illegally modified. Execute the following command to verify:

timedatectl

Remediation¶

• If the host time zone has been illegally modified, use timedatectl set-timezone to restore the host time zone. Carefully inspect the host environment for potential intrusion and change the host user password.

Impact¶

• None

Default Value¶

• None

References¶

• None

CIS Controls¶

• None