Feature: cisPartition
Description
A sub-feature of cis that configures the partition layout per CIS benchmark requirements. Must be used with the cis feature.
What it does
Ships a CIS-compliant fstab with separate partitions for /home, /var, /var/tmp, /var/log, /var/log/audit, each mounted with nosuid, noexec, and nodev. Configures /tmp as a systemd mount unit with CIS-compliant mount options.
Files
Files present in this feature and their purpose. See the feature file reference for the semantics of each file type.
| File | Purpose |
|---|---|
exec.config (ref) | Enables relevant systemd mount units and applies partition-related configuration. |
file.include.markers.yaml (ref) | Maps files to test-coverage marker IDs. |
fstab (ref) | Defines the CIS-compliant partition layout with separate mounts for /home, /var, and audit paths. |
info.yaml (ref) | Declares type: element and included/excluded features. |
file.include/etc/systemd/system/tmp.mount (file.include) | Configures /tmp as a systemd-managed tmpfs with CIS-compliant mount options (nosuid, noexec, nodev). |
Related features
This feature has no include or exclude relationships.