ensure_pam_wheel_group_empty: depend on pam being installed

This rule, which checks pam configuration, only makes sense when pam is installed.
ComplianceAsCode · Jul 6, 2023 · 0c318b6 · 0c318b6
1 parent 2f1286b
commit 0c318b6
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/...e/system/accounts/accounts-restrictions/root_logins/ensure_pam_wheel_group_empty/rule.yml b/...e/system/accounts/accounts-restrictions/root_logins/ensure_pam_wheel_group_empty/rule.yml
@@ -27,6 +27,8 @@ references:
     cis@ubuntu2004: '5.6'
     cis@ubuntu2204: 5.3.7
 
+platform: package[pam]
+
 ocil_clause: 'group {{{ var_pam_wheel_group_for_su }}} exists and has no user members'
 
 ocil: |-