Ensure /home Located On Separate Partition
An XCCDF Rule
Description
If user home directories will be stored locally, create a separate partition
for /home at installation time (or migrate it later using LVM). If
/home will be mounted from another system such as an NFS server, then
creating a separate partition is not necessary at installation time, and the
mountpoint can instead be configured later.
Rationale
Ensuring that /home is mounted on its own partition enables the
setting of more restrictive mount options, and also helps ensure that
users cannot trivially fill partitions used for log or audit data storage.
- ID
- xccdf_org.ssgproject.content_rule_partition_for_home
- Severity
- Low
- References
- Updated
Remediation - Anaconda Pre-Install Instructions
part /home
Remediation - OS Build Blueprint
[[customizations.filesystem]]
mountpoint = "/home"
size = 1073741824