Title

All local file systems must employ journaling or another mechanism ensuring file system consistency. (Cat III impact)

Discussion

File system journaling, or logging, can allow reconstruction of file system data after a system crash, thus preserving the integrity of data that may have otherwise been lost. Journaling file systems typically do not require consistent checks upon booting after a crash, which can improve system availability. Some file systems employ other mechanisms to ensure consistency which also satisfy this requirement.

Check Content

Verify local file systems use journaling or another mechanism ensuring file system consistency. Procedure: # mount -v | grep '^/dev/' | egrep -v '(logging|vxfs|zfs|devfs)' | grep -v /dev/fd If a mount is listed, this is a finding.

Fix Text

Convert local file systems to use journaling or another mechanism ensuring file system consistency.

Additional Identifiers

Rule ID: SV-227809r603266_rule

Vulnerability ID: V-227809

Group Title: SRG-OS-000480

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.