Installation guide
FHS Organization
35
5.2.1.14. The /var/ Directory
Since the FHS requires Linux to mount /usr/ as read-only, any programs that write log files or need
spool/ or lock/ directories should write them to the /var/ directory. The FHS states /var/ is for
variable data files, which include spool directories/files, logging data, transient/temporary files, and the
like.
Below are some of the directories found within the /var/ directory:
• /var/account/
• /var/arpwatch/
• /var/cache/
• /var/crash/
• /var/db/
• /var/empty/
• /var/ftp/
• /var/gdm/
• /var/kerberos/
• /var/lib/
• /var/local/
• /var/lock/
• /var/log/
• /var/mail -> /var/spool/mail/
• /var/mailman/
• /var/named/
• /var/nis/
• /var/opt/
• /var/preserve/
• /var/run/
• /var/spool/
• /var/tmp/
• /var/tux/
• /var/www/
• /var/yp/
System log files, such as messages and lastlog, go in the /var/log/ directory. The /var/lib/
rpm/ directory contains RPM system databases. Lock files go in the /var/lock/ directory, usually