Skip to content

Commit

Permalink
waive service_sssd_enabled
Browse files Browse the repository at this point in the history
this rule requires additional manual sssd configuration which can't be attained by our rules in a meaningful way
  • Loading branch information
vojtapolasek authored and comps committed Mar 22, 2024
1 parent 06a8a6b commit 3ed7300
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions conf/waivers-upstream
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,10 @@
# so remove the remediation exception + waiver on RHEL-8+
/hardening/host-os/.+/[^/]+/package_rsync_removed
rhel == 7
# the service_sssd_enabled will be failing even if the service is enabled
# because it requires manual configuration which cannot be attained with our rules
/hardening/.+/service_sssd_enabled
True

# requires running firewalld (firewall-cmd) and NetworkManager,
# which are not available in their final form in the Anaconda environment
Expand Down

0 comments on commit 3ed7300

Please sign in to comment.