A separate RHEL 9 file system must be used for user home directories (such as /home or an equivalent).
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-257843 | RHEL-09-231010 | SV-257843r991589_rule | CCI-000366 | medium |
| Description | ||||
| Ensuring that "/home" is mounted on its own partition enables the setting of more restrictive mount options, and also helps ensure that users cannot trivially fill partitions used for log or audit data storage. | ||||
| STIG | Date | |||
| Red Hat Enterprise Linux 9 Security Technical Implementation Guide | 2025-05-14 | |||
Details
Check Text (C-257843r991589_chk)
Verify that a separate file system/partition has been created for "/home" with the following command:
$ mount | grep /home
UUID=fba5000f-2ffa-4417-90eb-8c54ae74a32f on /home type ext4 (rw,nodev,nosuid,noexec,seclabel)
If a separate entry for "/home" is not in use, this is a finding.
Fix Text (F-61508r925515_fix)
Migrate the "/home" directory onto a separate file system/partition.