The system must use a separate file system for the system audit data path.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-72063	RHEL-07-021330	SV-86687r5_rule		Low

Description
The use of separate file systems for different paths can protect the system from failures resulting from a file system becoming full or failing.

STIG	Date
Red Hat Enterprise Linux 7 Security Technical Implementation Guide	2017-12-14

Details

Check Text ( C-72295r9_chk )
Determine if the "/var/log/audit" path is a separate file system. # grep /var/log/audit /etc/fstab If no result is returned, "/var/log/audit" is not on a separate file system, and this is a finding.

Fix Text (F-78415r1_fix)
Migrate the system audit data path onto a separate file system.