Detections
Analytics
RHEL-10-000550 - RHEL 10 must use a separate file system for "/var".
Information
Ensuring that "/var" is mounted on its own partition enables the setting of more restrictive mount options. This helps protect system services such as daemons or other programs that use it. It is not uncommon for the "/var" directory to contain world-writable directories installed by other software packages.Solution
Configure RHEL 10 to use a separate file system for the "/var" directory by migrating the "/var" path onto a separate file system.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_RHEL_10_V1R1_STIG.zip
Item Details
Audit Name: DISA Red Hat Enterprise Linux 10 STIG v1r1
Category: SYSTEM AND COMMUNICATIONS PROTECTION
References: 800-53|SC-5, CAT|II, CCI|CCI-002385, Rule-ID|SV-280939r1184729_rule, STIG-ID|RHEL-10-000550, Vuln-ID|V-280939
Plugin: Unix
Control ID: 0a3a6153e4c91fec1a88f81dd3162add2533601f1aa49f80fa3f5b4650e45771