diff --git a/conf/waivers/10-unknown b/conf/waivers/10-unknown
index 07f6cb48..64e1e9f1 100644
--- a/conf/waivers/10-unknown
+++ b/conf/waivers/10-unknown
@@ -50,7 +50,7 @@
 /hardening/ansible/.+/mount_option_boot_noexec
 /hardening/ansible/.+/mount_option_boot_nosuid
 /hardening/ansible/.+/mount_option_home_noexec
-/hardening/ansible/.+/audit_rules_usergroup_modification
+/hardening(/host-os)?/ansible/.+/audit_rules_usergroup_modification
     True
 # RHEL-9 only
 /hardening/ansible/with-gui/.+/network_nmcli_permissions