Information
The operating system must use a separate file system for /tmp (or equivalent).
Rationale:
The use of separate file systems for different paths can protect the system from failures resulting from a file system becoming full or failing.
Solution
Start the tmp.mount service with the following command:
# systemctl enable tmp.mount
OR
Edit the /etc/fstab file and ensure the /tmp directory is defined in the fstab with a device and mount point.
Example: vim /etc/fstab
Add, uncomment or update this line:
tmpfs /tmp tmpfs defaults,rw,nosuid,nodev,noexec,relatime 0 0
Notes:
This Benchmark recommendation maps to:
Red Hat Enterprise Linux 7 Security Technical Implementation Guide:
Version 2, Release: 3 Benchmark Date: 26 Apr 2019
Vul ID: V-72065
Rule ID: SV-86689r3_rule
STIG ID: RHEL-07-021340
Severity: CAT III