STIGUI
V-257846CAT III — Low severitySV-257846r1268251_rule

RHEL 9 must use a separate file system for /var/log.

Rule version RHEL-09-231025 · STIG v2 · 2026-09-17

Discussion

Placing "/var/log" in its own partition enables better separation between log files and other files in "/var/".

Check

Verify that a separate file system/partition has been created for "/var/log" with the following command:

$ mount | grep /var/log

/dev/mapper/rhel-var_log on /var/log type xfs (rw,nosuid,nodev,noexec,relatime,seclabel,attr2,inode64,logbufs=8,logbsize=32k) Note: Options displayed for mount may differ.

If a separate entry for "/var/log" is not in use, this is a finding.

Fix

Migrate the "/var/log" path onto a separate file system.

Identifiers

Group ID
V-257846
Group title
SRG-OS-000480-GPOS-00227
Rule ID
SV-257846r1268251_rule
Check ID
C-61587r1044921_chk
Fix ID
F-61511r925524_fix