BaselineWatch
Apply as published
Desk

Linux RHEL-10-000530

DISA STIG RHEL-10-000530 (CAT II): RHEL 10 must use a separate file system for user home directories (such as "/home" or an equivalent).

DISA STIG recommends

RHEL-10-000530 CAT II

RHEL 10 must use a separate file system for user home directories (such as "/home" or an equivalent).

NIST SP 800-53: SC-5

Check

Verify RHEL 10 uses a separate file system/partition for "/home" with the following command: $ mount | grep /home /dev/mapper/luks-ca2261ed-7b00-4b7b-84cd-8cd6d8fa4b28 on /home type xfs (rw,nodev,nosuid,noexec,seclabel) Note: Options displayed for mount may differ. If a separate entry for "/home" is not in use, this is a finding.

Fix

Configure RHEL 10 to use a separate file system for user home directories by migrating the "/home" directory onto a separate file system/partition.

Our decision

Apply as published

No decision recorded: the recommendation stands. The owner signs in to change it.

All Linux decisions · The Linux baseline · The Linux test plan