UCF STIG Viewer Logo

The system must use a separate file system for user home directories.


Overview

Finding ID Version Rule ID IA Controls Severity
V-208796 OL6-00-000007 SV-208796r793581_rule Low
Description
Ensuring that "/home" is mounted on its own partition enables the setting of more restrictive mount options, and also helps ensure that users cannot trivially fill partitions used for log or audit data storage.
STIG Date
Oracle Linux 6 Security Technical Implementation Guide 2021-12-03

Details

Check Text ( C-9049r357368_chk )
Run the following command to determine if "/home" is on its own partition or logical volume:

$ mount | grep "on /home "

If "/home" has its own partition or volume group, a line will be returned.
If no line is returned, this is a finding.
Fix Text (F-9049r357369_fix)
If user home directories will be stored locally, create a separate partition for "/home" at installation time (or migrate it later using LVM). If "/home" will be mounted from another system such as an NFS server, then creating a separate partition is not necessary at installation time, and the mountpoint can instead be configured later.