← Rules Catalog
lowfilesystemverified

Ensure /var is on a separate filesystem

separate-filesystem-var · RHEL ≥ 8 · 1 impl

Description

The /var directory must be on a separate filesystem or logical volume to prevent log and spool data from filling the root filesystem.

Rationale

A separate filesystem for /var prevents log files and other variable data from consuming all available disk space on the root filesystem, which could cause system instability.

Check → Remediate

Checkcommand
findmnt --noheadings /var
expected_exit:
0
Remediatemanual

Framework references

STIG

V-257845

NIST 800-53

CM-6

Live verification

rhel9:check
#filesystem#partitioning#storage