Blob Blame History Raw
From cf35976d0c455158fd6a49b8a82c13e383d85565 Mon Sep 17 00:00:00 2001
From: Vojtech Polasek <vpolasek@redhat.com>
Date: Tue, 17 Mar 2020 13:19:47 +0100
Subject: [PATCH] add ntp and chrony cpes

---
 debian10/cpe/debian10-cpe-dictionary.xml      | 10 ++++++++++
 debian8/cpe/debian8-cpe-dictionary.xml        | 10 ++++++++++
 debian9/cpe/debian9-cpe-dictionary.xml        | 10 ++++++++++
 fedora/cpe/fedora-cpe-dictionary.xml          | 10 ++++++++++
 ocp4/cpe/ocp4-cpe-dictionary.xml              |  5 +++++
 ol7/cpe/ol7-cpe-dictionary.xml                | 10 ++++++++++
 ol8/cpe/ol8-cpe-dictionary.xml                |  5 +++++
 opensuse/cpe/opensuse-cpe-dictionary.xml      | 10 ++++++++++
 rhel6/cpe/rhel6-cpe-dictionary.xml            | 10 ++++++++++
 rhel7/cpe/rhel7-cpe-dictionary.xml            | 10 ++++++++++
 rhel8/cpe/rhel8-cpe-dictionary.xml            |  5 +++++
 rhv4/cpe/rhv4-cpe-dictionary.xml              |  5 +++++
 .../oval/installed_env_has_chrony_package.xml | 20 +++++++++++++++++++
 .../oval/installed_env_has_ntp_package.xml    | 20 +++++++++++++++++++
 sle11/cpe/sle11-cpe-dictionary.xml            | 10 ++++++++++
 sle12/cpe/sle12-cpe-dictionary.xml            | 10 ++++++++++
 ssg/constants.py                              |  2 ++
 ubuntu1404/cpe/ubuntu1404-cpe-dictionary.xml  | 10 ++++++++++
 ubuntu1604/cpe/ubuntu1604-cpe-dictionary.xml  | 10 ++++++++++
 ubuntu1804/cpe/ubuntu1804-cpe-dictionary.xml  | 10 ++++++++++
 .../cpe/wrlinux1019-cpe-dictionary.xml        | 16 ++++++++++++---
 wrlinux8/cpe/wrlinux8-cpe-dictionary.xml      | 16 ++++++++++++---
 22 files changed, 218 insertions(+), 6 deletions(-)
 create mode 100644 shared/checks/oval/installed_env_has_chrony_package.xml
 create mode 100644 shared/checks/oval/installed_env_has_ntp_package.xml

diff --git a/debian10/cpe/debian10-cpe-dictionary.xml b/debian10/cpe/debian10-cpe-dictionary.xml
index 50b1cf598f..5cc27ceb79 100644
--- a/debian10/cpe/debian10-cpe-dictionary.xml
+++ b/debian10/cpe/debian10-cpe-dictionary.xml
@@ -17,6 +17,11 @@
             <!-- the check references an OVAL file that contains an inventory definition -->
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_is_a_machine</check>
       </cpe-item>
+      <cpe-item name="cpe:/a:chrony">
+            <title xml:lang="en-us">Package chrony is installed</title>
+            <!-- the check references an OVAL file that contains an inventory definition -->
+            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_chrony_package</check>
+      </cpe-item>
       <cpe-item name="cpe:/a:gdm">
             <title xml:lang="en-us">Package gdm is installed</title>
             <!-- the check references an OVAL file that contains an inventory definition -->
@@ -32,6 +37,11 @@
             <!-- the check references an OVAL file that contains an inventory definition -->
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_nss-pam-ldapd_package</check>
       </cpe-item>
+      <cpe-item name="cpe:/a:ntp">
+            <title xml:lang="en-us">Package ntp is installed</title>
+            <!-- the check references an OVAL file that contains an inventory definition -->
+            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_ntp_package</check>
+      </cpe-item>
       <cpe-item name="cpe:/a:pam">
             <title xml:lang="en-us">Package pam is installed</title>
             <!-- the check references an OVAL file that contains an inventory definition -->
diff --git a/debian8/cpe/debian8-cpe-dictionary.xml b/debian8/cpe/debian8-cpe-dictionary.xml
index c5832137be..38d490138a 100644
--- a/debian8/cpe/debian8-cpe-dictionary.xml
+++ b/debian8/cpe/debian8-cpe-dictionary.xml
@@ -17,6 +17,11 @@
             <!-- the check references an OVAL file that contains an inventory definition -->
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_is_a_machine</check>
       </cpe-item>
+      <cpe-item name="cpe:/a:chrony">
+            <title xml:lang="en-us">Package chrony is installed</title>
+            <!-- the check references an OVAL file that contains an inventory definition -->
+            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_chrony_package</check>
+      </cpe-item>
       <cpe-item name="cpe:/a:gdm">
             <title xml:lang="en-us">Package gdm is installed</title>
             <!-- the check references an OVAL file that contains an inventory definition -->
@@ -32,6 +37,11 @@
             <!-- the check references an OVAL file that contains an inventory definition -->
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_nss-pam-ldapd_package</check>
       </cpe-item>
+      <cpe-item name="cpe:/a:ntp">
+            <title xml:lang="en-us">Package ntp is installed</title>
+            <!-- the check references an OVAL file that contains an inventory definition -->
+            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_ntp_package</check>
+      </cpe-item>
       <cpe-item name="cpe:/a:pam">
             <title xml:lang="en-us">Package pam is installed</title>
             <!-- the check references an OVAL file that contains an inventory definition -->
diff --git a/debian9/cpe/debian9-cpe-dictionary.xml b/debian9/cpe/debian9-cpe-dictionary.xml
index 471823055b..f01770b044 100644
--- a/debian9/cpe/debian9-cpe-dictionary.xml
+++ b/debian9/cpe/debian9-cpe-dictionary.xml
@@ -17,6 +17,11 @@
             <!-- the check references an OVAL file that contains an inventory definition -->
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_is_a_machine</check>
       </cpe-item>
+      <cpe-item name="cpe:/a:chrony">
+            <title xml:lang="en-us">Package chrony is installed</title>
+            <!-- the check references an OVAL file that contains an inventory definition -->
+            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_chrony_package</check>
+      </cpe-item>
       <cpe-item name="cpe:/a:gdm">
             <title xml:lang="en-us">Package gdm is installed</title>
             <!-- the check references an OVAL file that contains an inventory definition -->
@@ -32,6 +37,11 @@
             <!-- the check references an OVAL file that contains an inventory definition -->
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_nss-pam-ldapd_package</check>
       </cpe-item>
+      <cpe-item name="cpe:/a:ntp">
+            <title xml:lang="en-us">Package ntp is installed</title>
+            <!-- the check references an OVAL file that contains an inventory definition -->
+            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_ntp_package</check>
+      </cpe-item>
       <cpe-item name="cpe:/a:pam">
             <title xml:lang="en-us">Package pam is installed</title>
             <!-- the check references an OVAL file that contains an inventory definition -->
diff --git a/fedora/cpe/fedora-cpe-dictionary.xml b/fedora/cpe/fedora-cpe-dictionary.xml
index fdf1aa72be..2964e320c2 100644
--- a/fedora/cpe/fedora-cpe-dictionary.xml
+++ b/fedora/cpe/fedora-cpe-dictionary.xml
@@ -52,6 +52,11 @@
             <!-- the check references an OVAL file that contains an inventory definition -->
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_is_a_machine</check>
       </cpe-item>
+      <cpe-item name="cpe:/a:chrony">
+            <title xml:lang="en-us">Package chrony is installed</title>
+            <!-- the check references an OVAL file that contains an inventory definition -->
+            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_chrony_package</check>
+      </cpe-item>
       <cpe-item name="cpe:/a:gdm">
             <title xml:lang="en-us">Package gdm is installed</title>
             <!-- the check references an OVAL file that contains an inventory definition -->
@@ -67,6 +72,11 @@
             <!-- the check references an OVAL file that contains an inventory definition -->
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_nss-pam-ldapd_package</check>
       </cpe-item>
+      <cpe-item name="cpe:/a:ntp">
+            <title xml:lang="en-us">Package ntp is installed</title>
+            <!-- the check references an OVAL file that contains an inventory definition -->
+            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_ntp_package</check>
+      </cpe-item>
       <cpe-item name="cpe:/a:pam">
             <title xml:lang="en-us">Package pam is installed</title>
             <!-- the check references an OVAL file that contains an inventory definition -->
diff --git a/ocp4/cpe/ocp4-cpe-dictionary.xml b/ocp4/cpe/ocp4-cpe-dictionary.xml
index 97e2801453..81047b6f45 100644
--- a/ocp4/cpe/ocp4-cpe-dictionary.xml
+++ b/ocp4/cpe/ocp4-cpe-dictionary.xml
@@ -12,6 +12,11 @@
             <!-- the check references an OVAL file that contains an inventory definition -->
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_is_a_machine</check>
       </cpe-item>
+      <cpe-item name="cpe:/a:chrony">
+            <title xml:lang="en-us">Package chrony is installed</title>
+            <!-- the check references an OVAL file that contains an inventory definition -->
+            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_chrony_package</check>
+      </cpe-item>
       <cpe-item name="cpe:/a:gdm">
             <title xml:lang="en-us">Package gdm is installed</title>
             <!-- the check references an OVAL file that contains an inventory definition -->
diff --git a/ol7/cpe/ol7-cpe-dictionary.xml b/ol7/cpe/ol7-cpe-dictionary.xml
index 2b8363ea67..c153272121 100644
--- a/ol7/cpe/ol7-cpe-dictionary.xml
+++ b/ol7/cpe/ol7-cpe-dictionary.xml
@@ -17,6 +17,11 @@
             <!-- the check references an OVAL file that contains an inventory definition -->
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_is_a_machine</check>
       </cpe-item>
+      <cpe-item name="cpe:/a:chrony">
+            <title xml:lang="en-us">Package chrony is installed</title>
+            <!-- the check references an OVAL file that contains an inventory definition -->
+            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_chrony_package</check>
+      </cpe-item>
       <cpe-item name="cpe:/a:gdm">
             <title xml:lang="en-us">Package gdm is installed</title>
             <!-- the check references an OVAL file that contains an inventory definition -->
@@ -32,6 +37,11 @@
             <!-- the check references an OVAL file that contains an inventory definition -->
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_nss-pam-ldapd_package</check>
       </cpe-item>
+      <cpe-item name="cpe:/a:ntp">
+            <title xml:lang="en-us">Package ntp is installed</title>
+            <!-- the check references an OVAL file that contains an inventory definition -->
+            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_ntp_package</check>
+      </cpe-item>
       <cpe-item name="cpe:/a:pam">
             <title xml:lang="en-us">Package pam is installed</title>
             <!-- the check references an OVAL file that contains an inventory definition -->
diff --git a/ol8/cpe/ol8-cpe-dictionary.xml b/ol8/cpe/ol8-cpe-dictionary.xml
index d3d642c9fd..3fd74e53ca 100644
--- a/ol8/cpe/ol8-cpe-dictionary.xml
+++ b/ol8/cpe/ol8-cpe-dictionary.xml
@@ -17,6 +17,11 @@
             <!-- the check references an OVAL file that contains an inventory definition -->
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_is_a_machine</check>
       </cpe-item>
+      <cpe-item name="cpe:/a:chrony">
+            <title xml:lang="en-us">Package chrony is installed</title>
+            <!-- the check references an OVAL file that contains an inventory definition -->
+            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_chrony_package</check>
+      </cpe-item>
       <cpe-item name="cpe:/a:gdm">
             <title xml:lang="en-us">Package gdm is installed</title>
             <!-- the check references an OVAL file that contains an inventory definition -->
diff --git a/opensuse/cpe/opensuse-cpe-dictionary.xml b/opensuse/cpe/opensuse-cpe-dictionary.xml
index 659045ac65..1ab4e85ea8 100644
--- a/opensuse/cpe/opensuse-cpe-dictionary.xml
+++ b/opensuse/cpe/opensuse-cpe-dictionary.xml
@@ -32,6 +32,11 @@
             <!-- the check references an OVAL file that contains an inventory definition -->
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_is_a_machine</check>
       </cpe-item>
+      <cpe-item name="cpe:/a:chrony">
+            <title xml:lang="en-us">Package chrony is installed</title>
+            <!-- the check references an OVAL file that contains an inventory definition -->
+            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_chrony_package</check>
+      </cpe-item>
       <cpe-item name="cpe:/a:gdm">
             <title xml:lang="en-us">Package gdm is installed</title>
             <!-- the check references an OVAL file that contains an inventory definition -->
@@ -47,6 +52,11 @@
             <!-- the check references an OVAL file that contains an inventory definition -->
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_nss-pam-ldapd_package</check>
       </cpe-item>
+      <cpe-item name="cpe:/a:ntp">
+            <title xml:lang="en-us">Package ntp is installed</title>
+            <!-- the check references an OVAL file that contains an inventory definition -->
+            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_ntp_package</check>
+      </cpe-item>
       <cpe-item name="cpe:/a:pam">
             <title xml:lang="en-us">Package pam is installed</title>
             <!-- the check references an OVAL file that contains an inventory definition -->
diff --git a/rhel6/cpe/rhel6-cpe-dictionary.xml b/rhel6/cpe/rhel6-cpe-dictionary.xml
index 39f844e2ab..2c8a82ebc5 100644
--- a/rhel6/cpe/rhel6-cpe-dictionary.xml
+++ b/rhel6/cpe/rhel6-cpe-dictionary.xml
@@ -37,6 +37,11 @@
             <!-- the check references an OVAL file that contains an inventory definition -->
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_is_a_machine</check>
       </cpe-item>
+      <cpe-item name="cpe:/a:chrony">
+            <title xml:lang="en-us">Package chrony is installed</title>
+            <!-- the check references an OVAL file that contains an inventory definition -->
+            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_chrony_package</check>
+      </cpe-item>
       <cpe-item name="cpe:/a:gdm">
             <title xml:lang="en-us">Package gdm is installed</title>
             <!-- the check references an OVAL file that contains an inventory definition -->
@@ -52,6 +57,11 @@
             <!-- the check references an OVAL file that contains an inventory definition -->
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_nss-pam-ldapd_package</check>
       </cpe-item>
+      <cpe-item name="cpe:/a:ntp">
+            <title xml:lang="en-us">Package ntp is installed</title>
+            <!-- the check references an OVAL file that contains an inventory definition -->
+            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_ntp_package</check>
+      </cpe-item>
       <cpe-item name="cpe:/a:pam">
             <title xml:lang="en-us">Package pam is installed</title>
             <!-- the check references an OVAL file that contains an inventory definition -->
diff --git a/rhel7/cpe/rhel7-cpe-dictionary.xml b/rhel7/cpe/rhel7-cpe-dictionary.xml
index a34b30c62f..a5214e36f0 100644
--- a/rhel7/cpe/rhel7-cpe-dictionary.xml
+++ b/rhel7/cpe/rhel7-cpe-dictionary.xml
@@ -47,6 +47,11 @@
             <!-- the check references an OVAL file that contains an inventory definition -->
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_is_a_machine</check>
       </cpe-item>
+      <cpe-item name="cpe:/a:chrony">
+            <title xml:lang="en-us">Package chrony is installed</title>
+            <!-- the check references an OVAL file that contains an inventory definition -->
+            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_chrony_package</check>
+      </cpe-item>
       <cpe-item name="cpe:/a:gdm">
             <title xml:lang="en-us">Package gdm is installed</title>
             <!-- the check references an OVAL file that contains an inventory definition -->
@@ -62,6 +67,11 @@
             <!-- the check references an OVAL file that contains an inventory definition -->
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_nss-pam-ldapd_package</check>
       </cpe-item>
+      <cpe-item name="cpe:/a:ntp">
+            <title xml:lang="en-us">Package ntp is installed</title>
+            <!-- the check references an OVAL file that contains an inventory definition -->
+            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_ntp_package</check>
+      </cpe-item>
       <cpe-item name="cpe:/a:pam">
             <title xml:lang="en-us">Package pam is installed</title>
             <!-- the check references an OVAL file that contains an inventory definition -->
diff --git a/rhel8/cpe/rhel8-cpe-dictionary.xml b/rhel8/cpe/rhel8-cpe-dictionary.xml
index c6594e169c..694cbb5a4e 100644
--- a/rhel8/cpe/rhel8-cpe-dictionary.xml
+++ b/rhel8/cpe/rhel8-cpe-dictionary.xml
@@ -22,6 +22,11 @@
             <!-- the check references an OVAL file that contains an inventory definition -->
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_is_a_machine</check>
       </cpe-item>
+      <cpe-item name="cpe:/a:chrony">
+            <title xml:lang="en-us">Package chrony is installed</title>
+            <!-- the check references an OVAL file that contains an inventory definition -->
+            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_chrony_package</check>
+      </cpe-item>
       <cpe-item name="cpe:/a:gdm">
             <title xml:lang="en-us">Package gdm is installed</title>
             <!-- the check references an OVAL file that contains an inventory definition -->
diff --git a/rhv4/cpe/rhv4-cpe-dictionary.xml b/rhv4/cpe/rhv4-cpe-dictionary.xml
index c53ae56254..56ea1abf8c 100644
--- a/rhv4/cpe/rhv4-cpe-dictionary.xml
+++ b/rhv4/cpe/rhv4-cpe-dictionary.xml
@@ -22,6 +22,11 @@
             <!-- the check references an OVAL file that contains an inventory definition -->
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_is_a_machine</check>
       </cpe-item>
+      <cpe-item name="cpe:/a:chrony">
+            <title xml:lang="en-us">Package chrony is installed</title>
+            <!-- the check references an OVAL file that contains an inventory definition -->
+            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_chrony_package</check>
+      </cpe-item>
       <cpe-item name="cpe:/a:gdm">
             <title xml:lang="en-us">Package gdm is installed</title>
             <!-- the check references an OVAL file that contains an inventory definition -->
diff --git a/shared/checks/oval/installed_env_has_chrony_package.xml b/shared/checks/oval/installed_env_has_chrony_package.xml
new file mode 100644
index 0000000000..b3a835c02e
--- /dev/null
+++ b/shared/checks/oval/installed_env_has_chrony_package.xml
@@ -0,0 +1,20 @@
+<def-group>
+
+  <definition class="inventory"
+  id="installed_env_has_chrony_package" version="1">
+    <metadata>
+      <title>Package chrony is installed</title>
+      <affected family="unix">
+        <platform>multi_platform_all</platform>
+      </affected>
+      <description>Checks if package chrony is installed.</description>
+      <reference ref_id="cpe:/a:chrony" source="CPE" />
+    </metadata>
+    <criteria>
+      <criterion comment="Package chrony is installed" test_ref="test_env_has_chrony_installed" />
+    </criteria>
+  </definition>
+
+  {{{ oval_test_package_installed(package='chrony', evr='', test_id='test_env_has_chrony_installed') }}}
+
+</def-group>
diff --git a/shared/checks/oval/installed_env_has_ntp_package.xml b/shared/checks/oval/installed_env_has_ntp_package.xml
new file mode 100644
index 0000000000..6babd17a0f
--- /dev/null
+++ b/shared/checks/oval/installed_env_has_ntp_package.xml
@@ -0,0 +1,20 @@
+<def-group>
+
+  <definition class="inventory"
+  id="installed_env_has_ntp_package" version="1">
+    <metadata>
+      <title>Package ntp is installed</title>
+      <affected family="unix">
+        <platform>multi_platform_all</platform>
+      </affected>
+      <description>Checks if package ntp is installed.</description>
+      <reference ref_id="cpe:/a:ntp" source="CPE" />
+    </metadata>
+    <criteria>
+      <criterion comment="Package ntp is installed" test_ref="test_env_has_ntp_installed" />
+    </criteria>
+  </definition>
+
+  {{{ oval_test_package_installed(package='ntp', evr='', test_id='test_env_has_ntp_installed') }}}
+
+</def-group>
diff --git a/sle11/cpe/sle11-cpe-dictionary.xml b/sle11/cpe/sle11-cpe-dictionary.xml
index f4af2c6330..c732ecb48a 100644
--- a/sle11/cpe/sle11-cpe-dictionary.xml
+++ b/sle11/cpe/sle11-cpe-dictionary.xml
@@ -22,6 +22,11 @@
             <!-- the check references an OVAL file that contains an inventory definition -->
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_is_a_machine</check>
       </cpe-item>
+      <cpe-item name="cpe:/a:chrony">
+            <title xml:lang="en-us">Package chrony is installed</title>
+            <!-- the check references an OVAL file that contains an inventory definition -->
+            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_chrony_package</check>
+      </cpe-item>
       <cpe-item name="cpe:/a:gdm">
             <title xml:lang="en-us">Package gdm is installed</title>
             <!-- the check references an OVAL file that contains an inventory definition -->
@@ -37,6 +42,11 @@
             <!-- the check references an OVAL file that contains an inventory definition -->
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_nss-pam-ldapd_package</check>
       </cpe-item>
+      <cpe-item name="cpe:/a:ntp">
+            <title xml:lang="en-us">Package ntp is installed</title>
+            <!-- the check references an OVAL file that contains an inventory definition -->
+            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_ntp_package</check>
+      </cpe-item>
       <cpe-item name="cpe:/a:pam">
             <title xml:lang="en-us">Package pam is installed</title>
             <!-- the check references an OVAL file that contains an inventory definition -->
diff --git a/sle12/cpe/sle12-cpe-dictionary.xml b/sle12/cpe/sle12-cpe-dictionary.xml
index ae70f01bce..79daa31412 100644
--- a/sle12/cpe/sle12-cpe-dictionary.xml
+++ b/sle12/cpe/sle12-cpe-dictionary.xml
@@ -22,6 +22,11 @@
             <!-- the check references an OVAL file that contains an inventory definition -->
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_is_a_machine</check>
       </cpe-item>
+      <cpe-item name="cpe:/a:chrony">
+            <title xml:lang="en-us">Package chrony is installed</title>
+            <!-- the check references an OVAL file that contains an inventory definition -->
+            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_chrony_package</check>
+      </cpe-item>
       <cpe-item name="cpe:/a:gdm">
             <title xml:lang="en-us">Package gdm is installed</title>
             <!-- the check references an OVAL file that contains an inventory definition -->
@@ -37,6 +42,11 @@
             <!-- the check references an OVAL file that contains an inventory definition -->
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_nss-pam-ldapd_package</check>
       </cpe-item>
+      <cpe-item name="cpe:/a:ntp">
+            <title xml:lang="en-us">Package ntp is installed</title>
+            <!-- the check references an OVAL file that contains an inventory definition -->
+            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_ntp_package</check>
+      </cpe-item>
       <cpe-item name="cpe:/a:pam">
             <title xml:lang="en-us">Package pam is installed</title>
             <!-- the check references an OVAL file that contains an inventory definition -->
diff --git a/ssg/constants.py b/ssg/constants.py
index 813e529b50..08af04138e 100644
--- a/ssg/constants.py
+++ b/ssg/constants.py
@@ -439,9 +439,11 @@
 XCCDF_PLATFORM_TO_CPE = {
     "machine": "cpe:/a:machine",
     "container": "cpe:/a:container",
+    "chrony": "cpe:/a:chrony",
     "gdm": "cpe:/a:gdm",
     "libuser": "cpe:/a:libuser",
     "nss-pam-ldapd": "cpe:/a:nss-pam-ldapd",
+    "ntp": "cpe:/a:ntp",
     "pam": "cpe:/a:pam",
     "login_defs": "cpe:/a:login_defs",
     "sssd": "cpe:/a:sssd",
diff --git a/ubuntu1404/cpe/ubuntu1404-cpe-dictionary.xml b/ubuntu1404/cpe/ubuntu1404-cpe-dictionary.xml
index 60a2a68823..df5abff723 100644
--- a/ubuntu1404/cpe/ubuntu1404-cpe-dictionary.xml
+++ b/ubuntu1404/cpe/ubuntu1404-cpe-dictionary.xml
@@ -17,6 +17,11 @@
             <!-- the check references an OVAL file that contains an inventory definition -->
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_is_a_machine</check>
       </cpe-item>
+      <cpe-item name="cpe:/a:chrony">
+            <title xml:lang="en-us">Package chrony is installed</title>
+            <!-- the check references an OVAL file that contains an inventory definition -->
+            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_chrony_package</check>
+      </cpe-item>
       <cpe-item name="cpe:/a:gdm">
             <title xml:lang="en-us">Package gdm is installed</title>
             <!-- the check references an OVAL file that contains an inventory definition -->
@@ -32,6 +37,11 @@
             <!-- the check references an OVAL file that contains an inventory definition -->
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_nss-pam-ldapd_package</check>
       </cpe-item>
+      <cpe-item name="cpe:/a:ntp">
+            <title xml:lang="en-us">Package ntp is installed</title>
+            <!-- the check references an OVAL file that contains an inventory definition -->
+            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_ntp_package</check>
+      </cpe-item>
       <cpe-item name="cpe:/a:pam">
             <title xml:lang="en-us">Package pam is installed</title>
             <!-- the check references an OVAL file that contains an inventory definition -->
diff --git a/ubuntu1604/cpe/ubuntu1604-cpe-dictionary.xml b/ubuntu1604/cpe/ubuntu1604-cpe-dictionary.xml
index b53643d1c5..6269344376 100644
--- a/ubuntu1604/cpe/ubuntu1604-cpe-dictionary.xml
+++ b/ubuntu1604/cpe/ubuntu1604-cpe-dictionary.xml
@@ -17,6 +17,11 @@
             <!-- the check references an OVAL file that contains an inventory definition -->
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_is_a_machine</check>
       </cpe-item>
+      <cpe-item name="cpe:/a:chrony">
+            <title xml:lang="en-us">Package chrony is installed</title>
+            <!-- the check references an OVAL file that contains an inventory definition -->
+            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_chrony_package</check>
+      </cpe-item>
       <cpe-item name="cpe:/a:gdm">
             <title xml:lang="en-us">Package gdm is installed</title>
             <!-- the check references an OVAL file that contains an inventory definition -->
@@ -32,6 +37,11 @@
             <!-- the check references an OVAL file that contains an inventory definition -->
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_nss-pam-ldapd_package</check>
       </cpe-item>
+      <cpe-item name="cpe:/a:ntp">
+            <title xml:lang="en-us">Package ntp is installed</title>
+            <!-- the check references an OVAL file that contains an inventory definition -->
+            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_ntp_package</check>
+      </cpe-item>
       <cpe-item name="cpe:/a:pam">
             <title xml:lang="en-us">Package pam is installed</title>
             <!-- the check references an OVAL file that contains an inventory definition -->
diff --git a/ubuntu1804/cpe/ubuntu1804-cpe-dictionary.xml b/ubuntu1804/cpe/ubuntu1804-cpe-dictionary.xml
index 46579d36ab..ccb285768e 100644
--- a/ubuntu1804/cpe/ubuntu1804-cpe-dictionary.xml
+++ b/ubuntu1804/cpe/ubuntu1804-cpe-dictionary.xml
@@ -17,6 +17,11 @@
             <!-- the check references an OVAL file that contains an inventory definition -->
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_is_a_machine</check>
       </cpe-item>
+      <cpe-item name="cpe:/a:chrony">
+            <title xml:lang="en-us">Package chrony is installed</title>
+            <!-- the check references an OVAL file that contains an inventory definition -->
+            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_chrony_package</check>
+      </cpe-item>
       <cpe-item name="cpe:/a:gdm">
             <title xml:lang="en-us">Package gdm is installed</title>
             <!-- the check references an OVAL file that contains an inventory definition -->
@@ -32,6 +37,11 @@
             <!-- the check references an OVAL file that contains an inventory definition -->
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_nss-pam-ldapd_package</check>
       </cpe-item>
+      <cpe-item name="cpe:/a:ntp">
+            <title xml:lang="en-us">Package ntp is installed</title>
+            <!-- the check references an OVAL file that contains an inventory definition -->
+            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_ntp_package</check>
+      </cpe-item>
       <cpe-item name="cpe:/a:pam">
             <title xml:lang="en-us">Package pam is installed</title>
             <!-- the check references an OVAL file that contains an inventory definition -->
diff --git a/wrlinux1019/cpe/wrlinux1019-cpe-dictionary.xml b/wrlinux1019/cpe/wrlinux1019-cpe-dictionary.xml
index 0c708dc1d0..73e419c9ab 100644
--- a/wrlinux1019/cpe/wrlinux1019-cpe-dictionary.xml
+++ b/wrlinux1019/cpe/wrlinux1019-cpe-dictionary.xml
@@ -2,10 +2,10 @@
 <cpe-list xmlns="http://cpe.mitre.org/dictionary/2.0"
           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
           xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0 http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd">
-      <cpe-item name="cpe:/o:windriver:wrlinux:1019">        
-            <title xml:lang="en-us">Wind River Linux 1019</title>        
+      <cpe-item name="cpe:/o:windriver:wrlinux:1019">
+            <title xml:lang="en-us">Wind River Linux 1019</title>
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_OS_is_wrlinux1019</check>
-      </cpe-item>        
+      </cpe-item>
       <cpe-item name="cpe:/a:container">
             <title xml:lang="en-us">Container</title>
             <!-- the check references an OVAL file that contains an inventory definition -->
@@ -16,6 +16,11 @@
             <!-- the check references an OVAL file that contains an inventory definition -->
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_is_a_machine</check>
       </cpe-item>
+      <cpe-item name="cpe:/a:chrony">
+            <title xml:lang="en-us">Package chrony is installed</title>
+            <!-- the check references an OVAL file that contains an inventory definition -->
+            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_chrony_package</check>
+      </cpe-item>
       <cpe-item name="cpe:/a:gdm">
             <title xml:lang="en-us">Package gdm is installed</title>
             <!-- the check references an OVAL file that contains an inventory definition -->
@@ -31,6 +36,11 @@
             <!-- the check references an OVAL file that contains an inventory definition -->
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_nss-pam-ldapd_package</check>
       </cpe-item>
+      <cpe-item name="cpe:/a:ntp">
+            <title xml:lang="en-us">Package ntp is installed</title>
+            <!-- the check references an OVAL file that contains an inventory definition -->
+            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_ntp_package</check>
+      </cpe-item>
       <cpe-item name="cpe:/a:pam">
             <title xml:lang="en-us">Package pam is installed</title>
             <!-- the check references an OVAL file that contains an inventory definition -->
diff --git a/wrlinux8/cpe/wrlinux8-cpe-dictionary.xml b/wrlinux8/cpe/wrlinux8-cpe-dictionary.xml
index 1421e79ac0..8449ea1416 100644
--- a/wrlinux8/cpe/wrlinux8-cpe-dictionary.xml
+++ b/wrlinux8/cpe/wrlinux8-cpe-dictionary.xml
@@ -2,10 +2,10 @@
 <cpe-list xmlns="http://cpe.mitre.org/dictionary/2.0"
           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
           xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0 http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd">
-      <cpe-item name="cpe:/o:windriver:wrlinux:8">        
-            <title xml:lang="en-us">Wind River Linux 8</title>        
+      <cpe-item name="cpe:/o:windriver:wrlinux:8">
+            <title xml:lang="en-us">Wind River Linux 8</title>
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_OS_is_wrlinux8</check>
-      </cpe-item>        
+      </cpe-item>
       <cpe-item name="cpe:/a:container">
             <title xml:lang="en-us">Container</title>
             <!-- the check references an OVAL file that contains an inventory definition -->
@@ -16,6 +16,11 @@
             <!-- the check references an OVAL file that contains an inventory definition -->
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_is_a_machine</check>
       </cpe-item>
+      <cpe-item name="cpe:/a:chrony">
+            <title xml:lang="en-us">Package chrony is installed</title>
+            <!-- the check references an OVAL file that contains an inventory definition -->
+            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_chrony_package</check>
+      </cpe-item>
       <cpe-item name="cpe:/a:gdm">
             <title xml:lang="en-us">Package gdm is installed</title>
             <!-- the check references an OVAL file that contains an inventory definition -->
@@ -31,6 +36,11 @@
             <!-- the check references an OVAL file that contains an inventory definition -->
             <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_nss-pam-ldapd_package</check>
       </cpe-item>
+      <cpe-item name="cpe:/a:ntp">
+            <title xml:lang="en-us">Package ntp is installed</title>
+            <!-- the check references an OVAL file that contains an inventory definition -->
+            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_ntp_package</check>
+      </cpe-item>
       <cpe-item name="cpe:/a:pam">
             <title xml:lang="en-us">Package pam is installed</title>
             <!-- the check references an OVAL file that contains an inventory definition -->