From ffd0614456e65823ced1096da37a059a76353d16 Mon Sep 17 00:00:00 2001
From: Arden97 <arden2545@gmail.com>
Date: Fri, 27 Feb 2026 17:15:59 +0100
Subject: [PATCH] file_permissions_grub2_cfg rhel10 waiver

---
 conf/waivers/productization | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/conf/waivers/productization b/conf/waivers/productization
index f20c8014..f4bf3c65 100644
--- a/conf/waivers/productization
+++ b/conf/waivers/productization
@@ -231,4 +231,12 @@
 /per-rule/.+/accounts_passwords_pam_faillock_unlock_time_with_zero/zero.pass
     rhel == 8
 
+# File /boot/grub2/grub2.cfg is created with lenient permissions by
+# bootupd during the installation of a bootable container image.
+# Tests still fail on RHEL 10.0
+# https://github.com/coreos/bootupd/issues/952
+# https://issues.redhat.com/browse/OPENSCAP-5326
+/hardening/container/(anaconda-ostree|bootc-image-builder|old-new)/.+/file_permissions_grub2_cfg
+    rhel == 10.0
+
 # vim: syntax=python