Ensure /opt Located On Separate Partition
An XCCDF Rule
Description
It is recommended that the /opt directory resides on a separate
partition.
Rationale
The /opt partition contains additional software, usually installed
outside the packaging system. Putting this directory on a separate partition
makes it easier to apply restrictions e.g. through the nosuid mount
option.
- ID
- xccdf_org.ssgproject.content_rule_partition_for_opt
- Severity
- Medium
- References
- Updated
Remediation - Anaconda Pre-Install Instructions
part /opt
Remediation - OS Build Blueprint
[[customizations.filesystem]]
mountpoint = "/opt"
size = 1073741824