OpenParable
Skip to content
← Back to skills

Cis Cassandra40 V110 1.6

DevOps & Security
cis-cassandra40-v110-1.6

Cis Cassandra40 V110 1.6 is an Agent Skill for devops & security published in the CyberStrikeus/CyberStrike repository on GitHub: a SKILL.md instruction file an AI agent can load to do this task.

Ensure clocks are synchronized on all nodes

View on GitHub ↗
QUICK START

How to use this skill

Bring this guide into your coding agent with a prompt tailored to the tool you use.

  1. Open your project in Codex.
  2. Copy and paste the prompt below.
  3. Review files and risks before approving any action.
Prompt to paste
Inspect the Agent Skill at https://github.com/CyberStrikeus/CyberStrike/blob/HEAD/.cyberstrike/skill/CIS_benchmarks/Server_Software/Apache_Cassandra/CIS_Apache_Cassandra_4.0_Benchmark_v1.1.0/cis-cassandra40-v110-1.6/SKILL.md and all supporting files. Report provenance, permissions, scripts, dependencies, and security risks. Propose an exact installation into .agents/skills/cis-cassandra40-v110-1-6, but wait for my approval before writing files or running scripts.

Copying this prompt does not install or run the skill. Review third-party files before use.

1.6 Ensure clocks are synchronized on all nodes

Profile Applicability

  • Level 1 - Cassandra on Linux

Description

Enabling Network Time Protocol (NTP), or some equivalent way, to keep clocks on all nodes in sync is critical.

Rationale

Cassandra decides which data is most current between all of the nodes in the cluster based on timestamps. It is paramount to ensure all clocks are in-sync, otherwise the most current data may not be returned or worse, marked for deletion.

Audit

Depending on the Linux installation this may be checked by executing the following command on each node:

ps -aef | grep ntp

OR

ps -aef | grep chronyd

OR

timedatectl status | grep NTP

If NTP is not configured or clocks are out-of-sync then this is a finding.

Remediation

Install and start the time protocol on every node in the Cassandra cluster.

Default Value

Varies by system configuration.

References

None specified in benchmark.

CIS Controls

v8:

  • 8.4 Standardize Time Synchronization - Standardize time synchronization. Configure at least two synchronized time sources across enterprise assets, where supported.

v7:

  • 6.1 Utilize Three Synchronized Time Sources - Use at least three synchronized time sources from which all servers and network devices retrieve time information on a regular basis so that timestamps in logs are consistent.

Profile

  • Level 1 | Manual