RHEL 9 must use a separate file system for /var/log.

STIG ID: RHEL-09-231025  |  SRG: SRG-OS-000480-GPOS-00227 |  Severity: low |  CCI: CCI-000366 |  Vulnerability Id: V-257846 | 

Vulnerability Discussion

Placing "/var/log" in its own partition enables better separation between log files and other files in "/var/".

Check

Verify that a separate file system/partition has been created for "/var/log" with the following command:

$ mount | grep /var/log

UUID=c274f65f-c5b5-4486-b021-bee96feb8b21 /var/log xfs noatime 1 2

If a separate entry for "/var/log" is not in use, this is a finding.

Fix

Migrate the "/var/log" path onto a separate file system.