packages:
- rpm
- policycoreutils
- kernel
- kernel-modules-extra
- rpm-ostree
- ostree-grub2
- selinux-policy-targeted
- biosdevname
- keyutils
- binutils
- nss-altfiles
- polkit
ignore-removed-users:
- root
ignore-removed-groups:
etc-group-members:
- wheel
- sudo
- systemd-journal
- adm
check-passwd:
type: "file"
filename: "passwd"
check-groups:
filename: "group"
units:
- getty@tty1.service
packages-x86_64:
- grub2 grub2-efi-x64 efibootmgr shim
- microcode_ctl
# firmware updates
- fwupd
