From a38b37962c709f810c5f3724ec13442d2f57868b Mon Sep 17 00:00:00 2001
From: Miha Purg <miha.purg@canonical.com>
Date: Wed, 15 Jan 2025 10:51:48 +0100
Subject: [PATCH] Switch to new rules for mac modifications on Ubuntu 24.04 CIS

---
 controls/cis_ubuntu2404.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/controls/cis_ubuntu2404.yml b/controls/cis_ubuntu2404.yml
index c6cb97fa55b..57f2d15d1b4 100644
--- a/controls/cis_ubuntu2404.yml
+++ b/controls/cis_ubuntu2404.yml
@@ -2682,7 +2682,8 @@ controls:
       - l2_server
       - l2_workstation
     rules:
-      - audit_rules_mac_modification
+      - audit_rules_mac_modification_etc_apparmor
+      - audit_rules_mac_modification_etc_apparmor_d
     status: automated
 
   - id: 6.2.3.15