Vulnerability Discussion
The macOS time synchronization daemon (timed) must be enabled for proper time synchronization to an authorized time server.
Note: The time synchronization daemon is enabled by default on macOS.
Satisfies: SRG-OS-000355-GPOS-00143,SRG-OS-000356-GPOS-00144
Check
Verify the macOS system is configured to enable time synchronization daemon with the following command:
/bin/launchctl list | /usr/bin/grep -c com.apple.timed
If the result is not "1", this is a finding.
Fix
Configure the macOS system to enable time synchronization daemon with the following command:
/bin/launchctl load -w /System/Library/LaunchDaemons/com.apple.timed.plist