Move alignment waiver installed_OS_is_vendor_supported to permanent w…

…aivers
RHSecurityCompliance · Apr 17, 2024 · ea30d8b · ea30d8b
1 parent b2fcff5
commit ea30d8b
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 3 deletions.
diff --git a/conf/waivers/20-long-term b/conf/waivers/20-long-term
@@ -126,8 +126,5 @@
 # https://github.com/ComplianceAsCode/content/issues/11197 (DISA issue)
 /scanning/disa-alignment/.*/display_login_attempts
     rhel == 8 or rhel == 9
-# https://github.com/ComplianceAsCode/content/issues/11649 (DISA issue)
-/scanning/disa-alignment/.*/installed_OS_is_vendor_supported
-    rhel == 9
 
 # vim: syntax=python
diff --git a/conf/waivers/30-permanent b/conf/waivers/30-permanent
@@ -42,6 +42,13 @@
 /static-checks/html-links/https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf
     True
 
+# DISA Alignment waivers
+#
+# DISA benchmark allows only released OS versions. Our content is fine with unreleased versions.
+# https://github.com/ComplianceAsCode/content/issues/11649
+/scanning/disa-alignment/.*/installed_OS_is_vendor_supported
+    Match(True, sometimes=True)
+
 # CentOS-specific waivers
 #
 # Rules checking if OS is FIPS certified