Tested on: OpenShift version 4.13
Any version of Compliance Operator

openshift-compliance check "chronyd-client-only" states that the check should pass if:

$ grep -w port /etc/chrony.conf
port 0

However, after adding "port 0" to the machine config value, the check does not pass.

sh-4.4# chroot /host
sh-5.1# grep -w port /etc/chrony.conf
port 0
sh-5.1# 

[root@b9d502b3e11d rhcos]# oc get ccr | grep chrony | grep client
bcbssc-rhcos4-high-canary-chronyd-client-only FAIL low

The only way that we can get this check to PASS is to paste the exact value in the remediation which overrides any custom values.