fix filter for linux workstation policy

Signed-off-by: Patrick Münch <[email protected]>
mondoohq · Sep 21, 2023 · 16eb25c · 16eb25c
1 parent 1d18587
commit 16eb25c
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/core/mondoo-linux-workstation-security.mql.yaml b/core/mondoo-linux-workstation-security.mql.yaml
@@ -64,6 +64,7 @@ policies:
       - title: Secure Boot
         filters: |
           asset.family.contains(_ == 'linux')
+          packages.where(name == /xorg|xserver|wayland/i).any(installed)
         checks:
           - uid: mondoo-linux-workstation-security-permissions-on-bootloader-config-are-configured
           - uid: mondoo-linux-workstation-security-secure-boot-is-enabled
@@ -73,6 +74,7 @@ policies:
       - title: Disk encryption
         filters: |
           asset.family.contains(_ == 'linux')
+          packages.where(name == /xorg|xserver|wayland/i).any(installed)
         checks:
           - uid: mondoo-linux-workstation-security-aes-encryption-algorithm
           - uid: mondoo-linux-workstation-security-root-and-home-are-encrypted
@@ -83,6 +85,7 @@ policies:
         filters: |
           asset.family.contains(_ == 'linux')
           package('fwupd').installed
+          packages.where(name == /xorg|xserver|wayland/i).any(installed)
         checks:
           - uid: mondoo-linux-workstation-security-bios-uptodate
         queries: