Check: GEN003620
Solaris 10 SPARC STIG:
GEN003620
(in versions v2 r4 through v1 r19)
Title
A separate file system must be used for user home directories (such as /home or equivalent). (Cat III impact)
Discussion
The use of separate file systems for different paths can protect the system from failures resulting from a file system becoming full or failing.
Check Content
Determine if the /export/home path is a separate file system. # grep /export/home /etc/vfstab If no result is returned, /export/home is not on a separate file system and this is a finding. If ZFS is used for home directories, this is not applicable.
Fix Text
Migrate the /export/home path onto a separate file system.
Additional Identifiers
Rule ID: SV-226900r603265_rule
Vulnerability ID: V-226900
Group Title: SRG-OS-000480
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
Number | Definition |
---|---|
CCI-000366 |
The organization implements the security configuration settings. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
Number | Title |
---|---|
CM-6 |
Configuration Settings |