diff --git a/products/rhel8/profiles/anssi_bp28_high.profile b/products/rhel8/profiles/anssi_bp28_high.profile index e2eeabbb78d..204e141b1f5 100644 --- a/products/rhel8/profiles/anssi_bp28_high.profile +++ b/products/rhel8/profiles/anssi_bp28_high.profile @@ -17,3 +17,5 @@ description: |- selections: - anssi:all:high + # the following rule renders UEFI systems unbootable + - '!sebool_secure_mode_insmod' diff --git a/products/rhel9/profiles/anssi_bp28_high.profile b/products/rhel9/profiles/anssi_bp28_high.profile index e2eeabbb78d..204e141b1f5 100644 --- a/products/rhel9/profiles/anssi_bp28_high.profile +++ b/products/rhel9/profiles/anssi_bp28_high.profile @@ -17,3 +17,5 @@ description: |- selections: - anssi:all:high + # the following rule renders UEFI systems unbootable + - '!sebool_secure_mode_insmod'