packages:
  - rpm
  - policycoreutils
  - kernel
  - kernel-modules-extra
  - rpm-ostree
  - ostree-grub2
  - selinux-policy-targeted
  - biosdevname
  - keyutils
  - binutils
  - nss-altfiles
  - polkit

ignore-removed-users:
  - root
ignore-removed-groups:
  - root
etc-group-members:
  - wheel
  - sudo
  - systemd-journal
  - adm


check-passwd:
  type: "file"
  filename: "passwd"
check-groups:
  type: "file"
  filename: "group"

units:
  - getty@tty1.service


packages-x86_64:
  - grub2 grub2-efi-x64 efibootmgr shim
  - microcode_ctl
  # firmware updates
  - fwupd