documentation_complete: true

title: 'Ensure /tmp Located On Separate Partition'

description: |-
    The <tt>/tmp</tt> directory is a world-writable directory used
    for temporary file storage. Ensure it has its own partition or
    logical volume at installation time, or migrate it using LVM.

rationale: |-
    The <tt>/tmp</tt> partition is used as temporary storage by many programs.
    Placing <tt>/tmp</tt> in its own partition enables the setting of more
    restrictive mount options, which can help protect programs which use it.

severity: low

identifiers:
    cce@rhel8: CCE-80851-9
    cce@rhel9: CCE-90845-9
    cce@rhel10: CCE-89606-8
    cce@sle12: CCE-91487-9
    cce@sle15: CCE-91179-2

references:
    cis-csc: 12,15,8
    cis@sle12: 1.1.2
    cis@sle15: 1.1.2
    cobit5: APO13.01,DSS05.02
    isa-62443-2013: 'SR 3.1,SR 3.5,SR 3.8,SR 4.1,SR 4.3,SR 5.1,SR 5.2,SR 5.3,SR 7.1,SR 7.6'
    iso27001-2013: A.13.1.1,A.13.2.1,A.14.1.3
    nist: CM-6(a),SC-5(2)
    nist-csf: PR.PT-4
    srg: SRG-OS-000480-GPOS-00227
    stigid@ol7: OL07-00-021340
    stigid@ol8: OL08-00-010543

{{{ complete_ocil_entry_separate_partition(part="/tmp") }}}

fixtext: '{{{ fixtext_separate_partition(part="/tmp") }}}'

srg_requirement: '{{{ srg_requirement_separate_partition("/tmp") }}}'


template:
    name: mount
    vars:
        mountpoint: /tmp
        min_size: 1073741824
