1.1.3.1 Ensure separate partition exists for /var

Audit

Run the following command and verify output shows /var is mounted.

Example:

# findmnt --kernel /var
TARGET SOURCE FSTYPE OPTIONS
/var /dev/sdb ext4 rw,relatime,seclabel,data=ordered

Remediation

For new installations, during installation create a custom partition setup and specify a separate partition for /var.

For systems that were previously installed, create a new partition and configure /etc/fstab as appropriate.