Partitions
Our hardened Linux VM images use a single-partition layout. As such, the following controls, which require dedicated partitions, are excluded from hardened VM images.
Rocky Linux 8.10
-
CIS 1.1.2.1.1: Ensure a separate partition exists for
/tmp -
CIS 1.1.2.1.2: Ensure the
nodevoption is set on/tmp -
CIS 1.1.2.1.3: Ensure the
nosuidoption is set on/tmp -
CIS 1.1.2.1.4: Ensure the
noexecoption is set on/tmp -
CIS 1.1.2.3.1: Ensure a separate partition exists for
/home -
CIS 1.1.2.3.2: Add the
nodevoption to/home -
CIS 1.1.2.4.1: Ensure a separate partition exists for
/var -
CIS 1.1.2.4.2: Add the
nodevoption to/var -
CIS 1.1.2.5.1: Ensure a separate partition exists for
/var/tmp -
CIS 1.1.2.5.2: Add the
nodevoption to/var/tmp -
CIS 1.1.2.6.1: Ensure a separate partition exists for
/var/log -
CIS 1.1.2.6.2: Add the
nodevoption to/var/log -
CIS 1.1.2.7.1: Ensure a separate partition exists for
/var/log/audit -
CIS 1.1.2.7.2: Add the
nodevoption to/var/log/audit