OL6-00-000007 - The system must use a separate file system for user home directories.

Information

Ensuring that '/home' is mounted on its own partition enables the setting of more restrictive mount options, and also helps ensure that users cannot trivially fill partitions used for log or audit data storage.

Solution

If user home directories will be stored locally, create a separate partition for '/home' at installation time (or migrate it later using LVM). If '/home' will be mounted from another system such as an NFS server, then creating a separate partition is not necessary at installation time, and the mountpoint can instead be configured later.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_6_V2R7_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-208796r793581_rule, STIG-ID|OL6-00-000007, STIG-Legacy|SV-64883, STIG-Legacy|V-50677, Vuln-ID|V-208796

Plugin: Unix

Control ID: 5f4c889b8cf9911583da7880de06550154bcbddd9aa4dbb059aeca0435214faa