documentation_complete: true


title: 'Ensure /opt Located On Separate Partition'

description: |-
    It is recommended that the <tt>/opt</tt> directory resides on a separate
    partition.

rationale: |-
    The <tt>/opt</tt> partition contains additional software, usually installed
    outside the packaging system. Putting this directory on a separate partition
    makes it easier to apply restrictions e.g. through the <tt>nosuid</tt> mount
    option.

severity: medium


identifiers:
    cce@rhel8: CCE-83340-0
    cce@rhel9: CCE-88770-3
    cce@rhel10: CCE-90750-1
    cce@sle12: CCE-91485-3
    cce@sle15: CCE-91177-6

{{{ complete_ocil_entry_separate_partition(part="/opt") }}}

template:
    name: mount
    vars:
        mountpoint: /opt
        min_size: 1073741824
