exclude more sssd related rules as they are being modified right now

ComplianceAsCode · Sep 17, 2024 · ebb1265 · ebb1265
1 parent d2576be
commit ebb1265
Show file tree

Hide file tree

Showing 3 changed files with 15 additions and 3 deletions.
diff --git a/products/rhel10/profiles/anssi_bp28_enhanced.profile b/products/rhel10/profiles/anssi_bp28_enhanced.profile
@@ -67,5 +67,9 @@ selections:
     - '!package_talk_removed'
     - '!package_xinetd_removed'
     - '!package_ypserv_removed'
-    # these rules are failing when they are remediated with Ansible, removing then temporarily until they are fixed
+    # these rules are failing when they are remediated with Ansible, removing them temporarily until they are fixed
     - '!accounts_password_pam_retry'
+    # These rules are being modified and they are causing trouble in their current state (R67)
+    - '!sssd_enable_pam_services'
+    - '!sssd_ldap_configure_tls_reqcert'
+    - '!sssd_ldap_start_tls'
diff --git a/products/rhel10/profiles/anssi_bp28_high.profile b/products/rhel10/profiles/anssi_bp28_high.profile
@@ -71,5 +71,9 @@ selections:
     - '!package_talk_removed'
     - '!package_xinetd_removed'
     - '!package_ypserv_removed'
-    # these rules are failing when they are remediated with Ansible, removing then temporarily until they are fixed
+    # these rules are failing when they are remediated with Ansible, removing them temporarily until they are fixed
     - '!accounts_password_pam_retry'
+    # These rules are being modified and they are causing trouble in their current state (R67)
+    - '!sssd_enable_pam_services'
+    - '!sssd_ldap_configure_tls_reqcert'
+    - '!sssd_ldap_start_tls'
diff --git a/products/rhel10/profiles/anssi_bp28_intermediary.profile b/products/rhel10/profiles/anssi_bp28_intermediary.profile
@@ -47,5 +47,9 @@ selections:
     - '!package_talk_removed'
     - '!package_xinetd_removed'
     - '!package_ypserv_removed'
-    # these rules are failing when they are remediated with Ansible, removing then temporarily until they are fixed
+    # these rules are failing when they are remediated with Ansible, removing them temporarily until they are fixed
     - '!accounts_password_pam_retry'
+    # These rules are being modified and they are causing trouble in their current state (R67)
+    - '!sssd_enable_pam_services'
+    - '!sssd_ldap_configure_tls_reqcert'
+    - '!sssd_ldap_start_tls'