1.109 ALMA-09-014980

Information

A separate file system must be used for user home directories (such as /home or an equivalent).

GROUP ID: V-269212
RULE ID: SV-269212r1050094

Ensuring that "/home" is mounted on its own partition enables the setting of more restrictive mount options, and also helps ensure that users cannot trivially fill partitions used for log or audit data storage.

Solution

Migrate the "/home" directory onto a separate file system/partition.

See Also

https://workbench.cisecurity.org/benchmarks/27039