diff --git a/ash-linux/el9/VendorSTIG/scap_undos.sls b/ash-linux/el9/VendorSTIG/scap_undos.sls
index ee9d7f3b9..15bee1a69 100644
--- a/ash-linux/el9/VendorSTIG/scap_undos.sls
+++ b/ash-linux/el9/VendorSTIG/scap_undos.sls
@@ -3,6 +3,9 @@
 # generic OSCAP content
 #
 #################################################################
+{%- set sudoerFiles = [ '/etc/sudoers' ] %}
+{%- set sudoerFiles = sudoerFiles + salt.file.find('/etc/sudoers.d', maxdepth=1, type='f') %}
+
 
 # Undo SCAP's appending of a `*.* @@logcollector` config-token in the
 # rsyslog.conf file