Merge pull request #10880 from Xeicker/aarch64_no_check_nx

Update platform on bios_enable_execution_restrictions
ComplianceAsCode · Jul 19, 2023 · a11e01f · a11e01f
2 parents 807d702 + 92c6c26
commit a11e01f
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/...ide/system/permissions/restrictions/enable_nx/bios_enable_execution_restrictions/rule.yml b/...ide/system/permissions/restrictions/enable_nx/bios_enable_execution_restrictions/rule.yml
@@ -43,7 +43,8 @@ references:
     stigid@rhel8: RHEL-08-010420
     stigid@ubuntu2004: UBTU-20-010447
 
-platform: machine
+# In aarch64 cpus the bit is XN and it is not disableable
+platform: machine and not aarch64_arch
 
 ocil: |-
     Verify the NX (no-execution) bit flag is set on the system.