From 07989cdc8e541d1def997fbd54ae123c2590a8ac Mon Sep 17 00:00:00 2001
From: Vojtech Polasek <vpolasek@redhat.com>
Date: Tue, 26 Mar 2024 17:03:08 +0100
Subject: [PATCH] waive sssd_enable_pam_services because it misses Ansible
 remediation

---
 conf/waivers-upstream | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/conf/waivers-upstream b/conf/waivers-upstream
index 5c3e8dc6..b846eaef 100644
--- a/conf/waivers-upstream
+++ b/conf/waivers-upstream
@@ -189,6 +189,9 @@
 /hardening(/host-os)?/ansible/.+/aide_use_fips_hashes
 /hardening(/host-os)?/ansible/.+/smartcard_auth
     rhel == 7
+# sssd_enable_pam_services is missing Ansible remediation
+/hardening(/host-os)?/ansible/.+/sssd_enable_pam_services
+    True
 
 # unknown as well, but happens only rarely
 /hardening/ansible/.+/configure_bashrc_exec_tmux