The Oracle Linux operating system must use a separate file system for /tmp (or equivalent).
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-221757 | OL07-00-021340 | SV-221757r991589_rule | Low |
| Description |
| The use of separate file systems for different paths can protect the system from failures resulting from a file system becoming full or failing. |
| STIG | Date |
| Oracle Linux 7 Security Technical Implementation Guide | 2024-08-26 |
Details
| Check Text (C-36283r602443_chk) |
| Verify that a separate file system/partition has been created for "/tmp". Check that a file system/partition has been created for "/tmp" with the following command: # systemctl is-enabled tmp.mount enabled If the "tmp.mount" service is not enabled, check to see if "/tmp" is defined in the fstab with a device and mount point: # grep -i /tmp /etc/fstab UUID=a411dc99-f2a1-4c87-9e05-184977be8539 /tmp ext4 rw,relatime,discard,data=ordered,nosuid,noexec, 0 0 If "tmp.mount" service is not enabled or the "/tmp" directory is not defined in the fstab with a device and mount point, this is a finding. |
| Fix Text (F-36247r602444_fix) |
| Start the "tmp.mount" service with the following command: # systemctl enable tmp.mount OR Edit the "/etc/fstab" file and ensure the "/tmp" directory is defined in the fstab with a device and mount point. |