RHEL 9 must use a separate file system for /var/log.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-257846	RHEL-09-231025	SV-257846r925525_rule		Low

Description
Placing "/var/log" in its own partition enables better separation between log files and other files in "/var/".

STIG	Date
Red Hat Enterprise Linux 9 Security Technical Implementation Guide	2023-12-01

Details

Check Text ( C-61587r925523_chk )
Verify that a separate file system/partition has been created for "/var/log" with the following command: $ mount | grep /var/log UUID=c274f65f-c5b5-4486-b021-bee96feb8b21 /var/log xfs noatime 1 2 If a separate entry for "/var/log" is not in use, this is a finding.

Fix Text (F-61511r925524_fix)
Migrate the "/var/log" path onto a separate file system.