Ensure /var/log is on a separate filesystem

Description

The /var/log directory must be on a separate filesystem or logical volume to prevent log data from filling the /var or root filesystem.

Rationale

A separate filesystem for /var/log prevents log data from consuming all available disk space, which could cause loss of audit records or system instability.

Framework references

Live verification