Ensure /var/tmp Located On Separate Partition
An XCCDF Rule
Description
The /var/tmp
directory is a world-writable directory used
for temporary file storage. Ensure it has its own partition or
logical volume at installation time, or migrate it using LVM.
Rationale
The /var/tmp
partition is used as temporary storage by many programs.
Placing /var/tmp
in its own partition enables the setting of more
restrictive mount options, which can help protect programs which use it.
- ID
- xccdf_org.ssgproject.content_rule_partition_for_var_tmp
- Severity
- Medium
- References
- Updated
Remediation - OS Build Blueprint
[[customizations.filesystem]]
mountpoint = "/var/tmp"
size = 1073741824
Remediation - Anaconda Pre-Install Instructions
part /var/tmp