The system must use a separate file system for /var.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-23736	GEN003621	SV-35050r1_rule	ECSC-1	Low

Description
The use of separate file systems for different paths can protect the system from failures resulting from a file system becoming full or failing.

STIG	Date
HP-UX 11.31 Security Technical Implementation Guide	2018-09-14

Details

Check Text ( C-34922r1_chk )
Determine if the /var path is a separate filesystem. # cat /etc/fstab | tr '\011' ' ' | tr -s ' ' | sed -e 's/^[ \t]*//' | \ grep -v "^#" | cut -f 2,2 -d " " | grep "^/var" | grep -v "/var/" If the above command returns nothing, /var is not on a separate filesystem and this is a finding.

Fix Text (F-30227r1_fix)
Migrate the /var path onto a separate file system.