diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_privileged_commands/audit_rules_privileged_commands_ssh_keysign/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_privileged_commands/audit_rules_privileged_commands_ssh_keysign/rule.yml
index 65596d36dca..831f5b87455 100644
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_privileged_commands/audit_rules_privileged_commands_ssh_keysign/rule.yml
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_privileged_commands/audit_rules_privileged_commands_ssh_keysign/rule.yml
@@ -4,6 +4,8 @@
 
 {{%- if product in ["sle12", "sle15"] %}}
   {{%- set ssh_keysign_path="/usr/lib/ssh/ssh-keysign" %}}
+{{%- elif 'ubuntu' in product %}}
+  {{%- set ssh_keysign_path="/usr/lib/openssh/ssh-keysign" %}}
 {{%- else %}}
   {{%- set ssh_keysign_path="/usr/libexec/openssh/ssh-keysign" %}}
 {{%- endif %}}
@@ -80,3 +82,4 @@ template:
         path: /usr/libexec/openssh/ssh-keysign
         path@sle12: /usr/lib/ssh/ssh-keysign
         path@sle15: /usr/lib/ssh/ssh-keysign
+        path@ubuntu2004: /usr/lib/openssh/ssh-keysign