A separate file system must be used for user home directories (such as /home or an equivalent).
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-269212 | SRG-OS-000480-GPOS-00230 | ALMA-09-014980 | SV-269212r1050094_rule | 2025-02-20 | 1 |
| Description |
|---|
| Ensuring that "/home" is mounted on its own partition enables the setting of more restrictive mount options, and also helps ensure that users cannot trivially fill partitions used for log or audit data storage. |
| ℹ️ Check |
|---|
| Verify that a separate file system/partition has been created for "/home" with the following command: $ mount | grep /home /dev/mapper/luks-10a20c46-483d-4d12-831f-5328eda18fd1 on /home type xfs (rw,nosuid,nodev,relatime,seclabel,attr2,inode64,logbufs=8,logbsize=32k,noquota) If a separate entry for "/home" is not in use, this is a finding. |
| ✔️ Fix |
|---|
| Migrate the "/home" directory onto a separate file system/partition. |