← Back to SLES 12 Security Technical Implementation Guide

V-217185

CAT III (Low)

The SUSE operating system must use a separate file system for /var.

Rule ID

SV-217185r991589_rule

STIG

SLES 12 Security Technical Implementation Guide

Version

V3R2

CCIs

V-77265

Discussion

The use of separate file systems for different paths can protect the system from failures resulting from a file system becoming full or failing.

Check Content

Verify that the SUSE operating system has a separate file system/partition for "/var".

Check that a file system/partition has been created for "/var" with the following command:

# grep /var /etc/fstab
UUID=c274f65f    /var   ext4   noatime,nobarrier   1 2

If a separate entry for "/var" is not in use, this is a finding.

Fix Text

Create a separate file system/partition on the SUSE operating system for "/var".

Migrate "/var" onto the separate file system/partition.