Skip to content

Ensure /var/tmp Located On Separate Partition

An XCCDF Rule

Description

The /var/tmp directory is a world-writable directory used for temporary file storage. Ensure it has its own partition or logical volume at installation time, or migrate it using LVM.

Rationale

The /var/tmp partition is used as temporary storage by many programs. Placing /var/tmp in its own partition enables the setting of more restrictive mount options, which can help protect programs which use it.

ID
xccdf_org.ssgproject.content_rule_partition_for_var_tmp
Severity
Medium
References
Updated



Remediation - OS Build Blueprint


[[customizations.filesystem]]
mountpoint = "/var/tmp"
size = 1073741824

Remediation - Anaconda Pre-Install Instructions


part /var/tmp