Exclude rpm_verify_permissions in pcidss profiles for RHEL

marcusburghardt · marcusburghardt · commit 5f05ba76dc12 · 2023-11-17T13:35:16.000+01:00
CI tests detected the rpm_verify_permissions rule is failing after pci-dss remediation. More investigation is needed before enabling this rule. Issue #11285
diff --git a/products/rhel7/profiles/pci-dss.profile b/products/rhel7/profiles/pci-dss.profile
@@ -22,3 +22,6 @@ description: |-
 
 selections:
     - pcidss_4:all
+    # More tests are needed to identify which rule is conflicting with rpm_verify_permissions.
+    # https://github.com/ComplianceAsCode/content/issues/11285
+    - '!rpm_verify_permissions'
diff --git a/products/rhel8/profiles/pci-dss.profile b/products/rhel8/profiles/pci-dss.profile
@@ -22,3 +22,6 @@ description: |-
 
 selections:
     - pcidss_4:all
+    # More tests are needed to identify which rule is conflicting with rpm_verify_permissions.
+    # https://github.com/ComplianceAsCode/content/issues/11285
+    - '!rpm_verify_permissions'
diff --git a/products/rhel9/profiles/pci-dss.profile b/products/rhel9/profiles/pci-dss.profile
@@ -25,3 +25,6 @@ selections:
     # audit-audispd-plugins package does not exist in RHEL 9
     # use only package_audispd-plugins_installed
     - '!package_audit-audispd-plugins_installed'
+    # More tests are needed to identify which rule is conflicting with rpm_verify_permissions.
+    # https://github.com/ComplianceAsCode/content/issues/11285
+    - '!rpm_verify_permissions'
