Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-50677 | OL6-00-000007 | SV-64883r1_rule | Low |
Description |
---|
Ensuring that "/home" is mounted on its own partition enables the setting of more restrictive mount options, and also helps ensure that users cannot trivially fill partitions used for log or audit data storage. |
STIG | Date |
---|---|
Oracle Linux 6 Security Technical Implementation Guide | 2016-12-20 |
Check Text ( C-53175r1_chk ) |
---|
Run the following command to determine if "/home" is on its own partition or logical volume: $ mount | grep "on /home " If "/home" has its own partition or volume group, a line will be returned. If no line is returned, this is a finding. |
Fix Text (F-55471r1_fix) |
---|
If user home directories will be stored locally, create a separate partition for "/home" at installation time (or migrate it later using LVM). If "/home" will be mounted from another system such as an NFS server, then creating a separate partition is not necessary at installation time, and the mountpoint can instead be configured later. |