Vulnerability Discussion
The macOS time synchronization daemon (timed) must be enabled for proper time synchronization to an authorized time server.
NOTE: The time synchronization daemon is enabled by default on macOS.
Satisfies: SRG-OS-000355-GPOS-00143, SRG-OS-000356-GPOS-00144, SRG-OS-000785-GPOS-00250
Check
Verify the macOS system is configured to enable the time synchronization daemon with the following command:
/bin/launchctl list | /usr/bin/grep -c com.apple.timed
If the result is not "1", this is a finding.
Fix
Configure the macOS system to enable the time synchronization daemon with the following command:
/bin/launchctl load -w /System/Library/LaunchDaemons/com.apple.timed.plist
NOTE: The service "timed" cannot be unloaded or loaded while System Integrity Protection (SIP) is enabled.