From c26b9cb586262beee6eda9e4208264de73e24a5f Mon Sep 17 00:00:00 2001
From: Alexandre Skrzyniarz <alexandre.skrzyniarz@laposte.net>
Date: Thu, 13 Mar 2025 11:37:20 +0100
Subject: [PATCH] fix accounts_password_pan_rety oval check for Debian

Deactivate the authselect extend_definition for debian.
---
 .../accounts_password_pam_retry/oval/shared.xml                 | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_retry/oval/shared.xml b/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_retry/oval/shared.xml
index 8a3c6c35229..65cb7dfef24 100644
--- a/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_retry/oval/shared.xml
+++ b/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_retry/oval/shared.xml
@@ -9,7 +9,9 @@
   <definition class="compliance" id="{{{ rule_id }}}" version="2">
     {{{ oval_metadata("The password retry should meet minimum requirements") }}}
     <criteria operator="AND" comment="The password retry should meet minimum requirements">
+      {{% if 'debian' not in product %}}
       <extend_definition definition_ref="enable_authselect"/>
+      {{% endif %}}
       <criteria operator="OR" comment="Conditions for retry are satisfied">
         <criteria operator="AND" comment="Conditions for retry in PAM files are satisfied">
           {{% for file in configuration_files %}}