Title

The system must use a separate file system for /var/log. (Cat III impact)

Discussion

Placing "/var/log" in its own partition enables better separation between log files and other files in "/var/".

Check Content

Run the following command to determine if "/var/log" is on its own partition or logical volume: $ mount | grep "on /var/log " If "/var/log" has its own partition or volume group, a line will be returned. If no line is returned, this is a finding.

Fix Text

System logs are stored in the "/var/log" directory. Ensure that it has its own partition or logical volume at installation time, or migrate it using LVM.

Additional Identifiers

Rule ID: SV-217848r603264_rule

Vulnerability ID: V-217848

Group Title: SRG-OS-000480

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.