diff --git a/controls/cis_ubuntu2404.yml b/controls/cis_ubuntu2404.yml
index c6cb97fa55b..57f2d15d1b4 100644
--- a/controls/cis_ubuntu2404.yml
+++ b/controls/cis_ubuntu2404.yml
@@ -2682,7 +2682,8 @@ controls:
       - l2_server
       - l2_workstation
     rules:
-      - audit_rules_mac_modification
+      - audit_rules_mac_modification_etc_apparmor
+      - audit_rules_mac_modification_etc_apparmor_d
     status: automated
 
   - id: 6.2.3.15