CCE-90600-8Platform: rhel7,centos7 | Date: (C)2017-06-29 (M)2022-10-10 |
Ensure /home Located On Separate Partition
If user home directories will be stored locally, create a separate partition
for '/home' at installation time (or migrate it later using LVM). If
'/home' will be mounted from another system such as an NFS server, then
creating a separate partition is not necessary at installation time, and the
mountpoint can instead be configured later.
Parameter:
Technical Mechanism:
Ensuring that '/home' is mounted on its own partition enables the
setting of more restrictive mount options, and also helps ensure that
users cannot trivially fill partitions used for log or audit data storage.
Fix:
No Remediation Info
CCSS Severity: | CCSS Metrics: |
CCSS Score : | Attack Vector: |
Exploit Score: | Attack Complexity: |
Impact Score: | Privileges Required: |
Severity: | User Interaction: |
Vector: | Scope: |
| Confidentiality: |
| Integrity: |
| Availability: |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:31016 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:30293 |