waive sssd_enable_pam_services because it misses Ansible remediation

RHSecurityCompliance · Mar 26, 2024 · f4227c4 · f4227c4
1 parent e673b9d
commit f4227c4
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/conf/waivers-upstream b/conf/waivers-upstream
@@ -1,3 +1,7 @@
+# the rule sssd_enable_pam_services  is missing Ansible remediation
+/hardening(/host-os)?/ansible/.+/sssd_enable_pam_services
+    True
+
 # remediation for this is globally disabled in Contest,
 # see conf/remediation.py
 /hardening/.*/accounts_password_set_max_life_(existing|root)