waive sssd_enable_pam_services because it misses Ansible remediation

RHSecurityCompliance · Mar 28, 2024 · ae337c6 · ae337c6
1 parent 698040c
commit ae337c6
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/conf/waivers-upstream b/conf/waivers-upstream
@@ -185,6 +185,9 @@
 /hardening(/host-os)?/ansible/.+/aide_use_fips_hashes
 /hardening(/host-os)?/ansible/.+/smartcard_auth
     rhel == 7
+# sssd_enable_pam_services is missing Ansible remediation
+/hardening(/host-os)?/ansible/.+/sssd_enable_pam_services
+    True
 
 # unknown as well, but happens only rarely
 /hardening/ansible/.+/configure_bashrc_exec_tmux