AlmaLinux OS 9 must use a separate file system for /var.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-269304	ALMA-09-025430	SV-269304r1050186_rule		Medium

Description

Ensuring that "/var" is mounted on its own partition enables the setting of more restrictive mount options. This helps protect system services such as daemons or other programs which use it. It is not uncommon for the "/var" directory to contain world-writable directories installed by other software packages.

STIG	Date
CloudLinux AlmaLinux OS 9 Security Technical Implementation Guide	2025-05-22

Details

Check Text (C-73335r1048288_chk)

Verify that a separate file system/partition has been created for "/var" with the following command:

$ mount | grep ' /var '

/dev/mapper/luks-b23d8276-7844-4e79-8a58-505150b6eb42 on /var type xfs (rw,nosuid,nodev,noexec,relatime,seclabel,attr2,inode64,logbufs=8,logbsize=32k,noquota)

If a separate entry for "/var" is not in use, this is a finding.

Fix Text (F-73236r1048289_fix)

Migrate the "/var" path onto a separate file system.