| Verify "/var/log" is mounted with the "nodev" option: |
$ sudo mount | grep /var/log
/dev/mapper/rhel-var-log on /var/log type xfs (rw,nodev,nosuid,noexec,seclabel)
Verify that the "nodev" option is configured for /var/log:
$ sudo cat /etc/fstab | grep /var/log
/dev/mapper/rhel-var-log /var/log xfs defaults,nodev,nosuid,noexec 0 0
If results are returned and the "nodev" option is missing, or if /var/log is mounted without the "nodev" option, this is a finding.