OL 9 must use a separate file system for /var.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-271435	OL09-00-000005	SV-271435r1091017_rule		Low

Description

Ensuring that "/var" is mounted on its own partition enables the setting of more restrictive mount options. This helps protect system services such as daemons or other programs which use it. It is not uncommon for the "/var" directory to contain world-writable directories installed by other software packages.

STIG	Date
Oracle Linux 9 Security Technical Implementation Guide	2025-05-08

Details

Check Text (C-75485r1091015_chk)

Verify that OL 9 uses a separate file system/partition for "/var" with the following command:

$ mount | grep /var
UUID=c274f65f-c5b5-4481-b007-bee96feb8b05 /var xfs noatime 1 2

If a separate entry for "/var" is not in use, this is a finding.

Fix Text (F-75392r1091016_fix)

Migrate the "/var" path onto a separate file system.