Mount Partitions with the no options
In Chapter 12, Scanning, Auditing, and Hardening, I showed you how OpenSCAP can automatically bring your Linux systems into compliance with the security standards of certain regulatory bodies. I also told you the inconvenient truth that there are certain things that OpenSCAP can’t do, and that you’ll have to do for yourself. One thing that it can’t do is to partition your system drives as some of these regulatory bodies require. For example, the Security Technical Implementation Guides (STIGs) that the US Government uses require the following Linux system and data directories to be mounted on their own partitions:
/var/var/log//var/tmp//var/log/audit//tmp//home//boot//boot/efi/(You’ll only have this one if your machine is set up in EFI mode.)
The reason for this is twofold:
- If the root (
/) partition of a Linux operating system becomes too...
