Waive timer_logrotate_enabled and accounts_root_gid_zero

RHSecurityCompliance · Jan 22, 2025 · e3ec590 · e3ec590
1 parent c984a3d
commit e3ec590
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/conf/waivers/10-unknown b/conf/waivers/10-unknown
@@ -66,8 +66,10 @@
 
 # Ansible, on 9.0 / 9.2
 # https://github.com/ComplianceAsCode/content/issues/12831
+# https://github.com/ComplianceAsCode/content/issues/12870
 /hardening/host-os/ansible/anssi_bp28_minimal/timer_dnf-automatic_enabled
-    rhel == 9.0 or rhel == 9.2
+/hardening/host-os/ansible/anssi_bp28_high/timer_logrotate_enabled
+    rhel == 9
 
 # https://github.com/ComplianceAsCode/content/issues/10901
 # not sure what enables the service, but second remediation fixes the problem
@@ -118,6 +120,10 @@
 /hardening/host-os/oscap/[^/]+/package_.+_installed
     True
 
+# https://github.com/ComplianceAsCode/content/issues/12874
+/per-rule/.+/ansible/accounts_root_gid_zero/other_user_uid_0.fail
+    rhel == 9
+
 # DISA Alignment waivers
 #
 # https://github.com/ComplianceAsCode/content/issues/12561