Skip to main content

All,
I have built an NTP Patch check Attribute to identify computers not patched, and silently patch them automatically
https://jumpt.wordpress.com/2015/01/07/ntp-vulnerability-check-attribute-for-casper/

Feel free to comment and provide feedback
Cheers

Got this as an error:



Traceback (most recent call last):
File "./r.py", line 17, in <module>
o = check.strip()
NameError: name 'check' is not defined

Thanks for the feedback, should be fixed now. Also the script will install the NTP patch if the mac is not patched


Just a point - I'm running 10.10.2 and when you have the 10.10.1 hardcoded in, you get this:



<result>No:OS is 10.10.2</result>


So you might want to handle the 10.10.x differently as it's still being updated, and at least so far, NTP fix is not in the 10.10.2 build.



If I change the code to 10.10.2, I get this:



<result>Yes</result>


*Edit: Thanks for writing this.


I've created a pull/merge request for the updated 10.10.2 version.


@boettchs: Thank you for the feedback, I put in a better way to handle that, feel free to check it out.
@jjones:I saw your pull but please check out the updated version I put up.
Thank you both again.


@qsodji: Thank you. It looks like this runs fine. My guess would be that NTP will be in 10.10.2+, but you never know with Apple. This should allow for that either way. Appreciate the help!


No worries, I am happy to be able to give back to the community.


I have updated the above script to also handle the new versions of ntpd.
As I am on 10.10.2 now, my ntpd version is ntp-92.10.1 which is above the version listed by apple in the white paper ntp-92.5.1.
Feedbacks are welcome!