SLEM 5 must use a separate file system for /var.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-261279	SLEM-05-231015	SV-261279r996322_rule		Medium

Description

The use of separate file systems for different paths can protect the system from failures resulting from a file system becoming full or failing.

STIG	Date
SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide	2025-05-08

Details

Check Text (C-65008r996321_chk)

Verify that SLEM 5 has a separate file system/partition for "/var" with the following command:

> grep /var /etc/fstab
UUID=c4e898dd-6cd9-4091-a733-9435e505957a /var btrfs defaults,subvol=@/var,x-initrd.mount 0 0

If a separate entry for "/var" does not exist, this is a finding.

Fix Text (F-64916r995703_fix)

Create a separate file system/partition on SLEM 5 for "/var".

Migrate "/var" onto the separate file system/partition.