diff --git a/linux_os/guide/auditing/auditd_configure_rules/audit_rules_sudoers_d/oval/shared.xml b/linux_os/guide/auditing/auditd_configure_rules/audit_rules_sudoers_d/oval/shared.xml index d80e8f42a16..0509ce1c4d7 100644 --- a/linux_os/guide/auditing/auditd_configure_rules/audit_rules_sudoers_d/oval/shared.xml +++ b/linux_os/guide/auditing/auditd_configure_rules/audit_rules_sudoers_d/oval/shared.xml @@ -18,7 +18,7 @@ ^/etc/audit/rules\.d/.*\.rules$ - ^\-w[\s]+/etc/sudoers\.d/[\s]+\-p[\s]+\b([rx]*w[rx]*a[rx]*|[rx]*a[rx]*w[rx]*)\b.*$ + ^\-w[\s]+/etc/sudoers\.d/?[\s]+\-p[\s]+\b([rx]*w[rx]*a[rx]*|[rx]*a[rx]*w[rx]*)\b.*$ 1 @@ -27,7 +27,7 @@ /etc/audit/audit.rules - ^\-w[\s]+/etc/sudoers\.d/[\s]+\-p[\s]+\b([rx]*w[rx]*a[rx]*|[rx]*a[rx]*w[rx]*)\b.*$ + ^\-w[\s]+/etc/sudoers\.d/?[\s]+\-p[\s]+\b([rx]*w[rx]*a[rx]*|[rx]*a[rx]*w[rx]*)\b.*$ 1 diff --git a/linux_os/guide/auditing/auditd_configure_rules/audit_rules_sudoers_d/tests/missing_slash.fail.sh b/linux_os/guide/auditing/auditd_configure_rules/audit_rules_sudoers_d/tests/missing_slash.pass.sh similarity index 100% rename from linux_os/guide/auditing/auditd_configure_rules/audit_rules_sudoers_d/tests/missing_slash.fail.sh rename to linux_os/guide/auditing/auditd_configure_rules/audit_rules_sudoers_d/tests/missing_slash.pass.sh