RHEL 9 must use a separate file system for /tmp.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
---|---|---|---|---|---|---|
medium | V-257844 | SRG-OS-000480-GPOS-00227 | RHEL-09-231015 | SV-257844r1044918_rule | 2025-02-27 | 2 |
Description |
---|
The "/tmp" partition is used as temporary storage by many programs. Placing "/tmp" in its own partition enables the setting of more restrictive mount options, which can help protect programs that use it. |
ℹ️ Check |
---|
Verify that a separate file system/partition has been created for "/tmp" with the following command: $ mount | grep /tmp /dev/mapper/rhel-tmp on /tmp type xfs (rw,nodev,nosuid,noexec,seclabel) If a separate entry for "/tmp" is not in use, this is a finding. |
✔️ Fix |
---|
Migrate the "/tmp" path onto a separate file system. |