lowfilesystemverified ✓
Ensure /var is on a separate filesystem
separate-filesystem-var · RHEL ≥ 8 · 1 impl
Description
The /var directory must be on a separate filesystem or logical volume to prevent log and spool data from filling the root filesystem.
Rationale
A separate filesystem for /var prevents log files and other variable data from consuming all available disk space on the root filesystem, which could cause system instability.
Check → Remediate
Checkcommand
findmnt --noheadings /var
- expected_exit:
- 0
Remediatemanual
Framework references
STIG
V-257845
NIST 800-53
CM-6
Live verification
rhel9:check
#filesystem#partitioning#storage