2.7 Create Separate Partition for /var/log

Information

The /var/log directory is used by system services to store log data .

*Rationale*


There are two important reasons to ensure that system logs are stored on a separate
partition- protection against resource exhaustion (since logs can grow quite large) and
protection of audit data.

Solution

For new installations, during installation create a custom partition setup and specify a
separate partition for /var/log.For systems that were previously installed, use the Logical Volume Manager (LVM) to
create partitions.

See Also

https://workbench.cisecurity.org/files/91

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-4, CSCv6|6.3, CSCv7|6.4

Plugin: Unix

Control ID: ddc52d11e3509ca37f002147658e101d9237cc2bef96a9ff62dda987a1c9af00