diff --git a/Library/scap-results/rule_waivers/rhel9/stig-fail b/Library/scap-results/rule_waivers/rhel9/stig-fail index e1dc77f..516120a 100644 --- a/Library/scap-results/rule_waivers/rhel9/stig-fail +++ b/Library/scap-results/rule_waivers/rhel9/stig-fail @@ -7,3 +7,4 @@ set_password_hashing_algorithm_systemauth - https://github.com/OpenSCAP/openscap set_password_hashing_algorithm_passwordauth - https://github.com/OpenSCAP/openscap/issues/1880, needs to be remediated once more (pass in initial scan, enable_authselect breaks it, but this rule is not remediated as it passed in initial scan) accounts_password_pam_retry - https://github.com/OpenSCAP/openscap/issues/1880, needs to be remediated once more (pass in initial scan, enable_authselect breaks it, but this rule is not remediated as it passed in initial scan) postfix_prevent_unrestricted_relay - https://github.com/OpenSCAP/openscap/issues/1880, needs to be remediated once more (notapplicable in initial scan because of no postfix, during remediation phase postfix is installed, but this rule is not remediated) +rpm_verify_permissions - The fail is expected due to conflict with file_permissions_cron rule family. See the warning in rule.yml. Rules file_permissions_cron_* require changing the permissions to a different that default mode for files that belong to the crontab and cronie RPM packages.