← Rules Catalog
mediumfilesystemverified

Ensure /home is on a separate filesystem

separate-filesystem-home · RHEL ≥ 8 · 1 impl

Description

The /home directory must be on a separate filesystem or logical volume to prevent user data from filling the root filesystem.

Rationale

A separate filesystem for /home prevents users from consuming all available disk space on the root filesystem, which could cause system instability or denial of service.

Check → Remediate

Checkcommand
findmnt --noheadings /home
expected_exit:
0
Remediatemanual

Framework references

STIG

V-257843

NIST 800-53

CM-6

Live verification

rhel9:check
#filesystem#partitioning#storage