Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The system must use a separate file system for user home directories.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-208796 | OL6-00-000007 | SV-208796r505921_rule | Low |
| Description |
|---|
| Ensuring that "/home" is mounted on its own partition enables the setting of more restrictive mount options, and also helps ensure that users cannot trivially fill partitions used for log or audit data storage. |
| STIG | Date |
|---|---|
| Oracle Linux 6 Security Technical Implementation Guide | 2020-09-10 |
Details
| Check Text ( C-9049r357368_chk ) |
|---|
| Run the following command to determine if "/home" is on its own partition or logical volume: $ mount | grep "on /home " If "/home" has its own partition or volume group, a line will be returned. If no line is returned, this is a finding. |
| Fix Text (F-9049r357369_fix) |
|---|
| If user home directories will be stored locally, create a separate partition for "/home" at installation time (or migrate it later using LVM). If "/home" will be mounted from another system such as an NFS server, then creating a separate partition is not necessary at installation time, and the mountpoint can instead be configured later. |