From c7fc4669816f2233a624e8ea74308222973c2c62 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jan=20=C4=8Cern=C3=BD?= <jcerny@redhat.com>
Date: Mon, 21 Sep 2026 10:06:15 +0200
Subject: [PATCH] Add waiver for rule rpm_verify_permissions on RHEL 10 HIPAA

See https://github.com/ComplianceAsCode/content/issues/15132
---
 conf/waivers/productization | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/conf/waivers/productization b/conf/waivers/productization
index 7c4cd6c2..c3bc7b7e 100644
--- a/conf/waivers/productization
+++ b/conf/waivers/productization
@@ -56,6 +56,10 @@
 /hardening/anaconda(/with-gui)?/[^/]+/service_nftables_disabled
     True
 
+# https://github.com/ComplianceAsCode/content/issues/15132
+/hardening/ansible/uefi/hipaa/rpm_verify_permissions
+    rhel == 10.3
+
 # https://github.com/ComplianceAsCode/content/issues/12282
 /hardening/kickstart/.+/service_avahi-daemon_disabled
 /hardening/kickstart/.+/socket_systemd-journal-remote_disabled