lowfilesystemverified ✓

Ensure /home is on a separate filesystem

mount-home-separate-fs · RHEL ≥ 8 · 1 impl

Description

User home directories must reside on a separate filesystem or logical volume. A dedicated partition for /home prevents user data growth from consuming the root filesystem.

Rationale

Without a separate /home filesystem, user files could fill the root filesystem, causing system instability. A separate partition also allows distinct mount options (nodev, nosuid, noexec) to be enforced on home directories independently of the root filesystem.

Check → Remediate

Checkcommand

findmnt /home 2>/dev/null | grep -v '^TARGET' | awk '{print $1}' | grep -q '/home$'

expected_exit:: 0

Remediatemanual

note:: Create a separate partition or logical volume for /home and add it to /etc/fstab with nodev and nosuid mount options. Migrate existing user home directories to the new partition.

Framework references

CIS

rhel9 1.1.2.3.1rhel10 1.1.2.3.1rhel8 1.1.2.3.1

STIG

V-280937 / RHEL-10-000530V-230328

NIST 800-53

CM-6SC-5

Live verification

rhel10:checkrhel8:checkrhel9:check

#mount#home#filesystem#hardening