From 073832e517d0035c51401af619ad616fff853e9f Mon Sep 17 00:00:00 2001
From: Matthew Burket <mburket@redhat.com>
Date: Mon, 16 Dec 2024 12:13:26 -0600
Subject: [PATCH] Update package_gssproxy_removed based on feedback

---
 .../software/system-tools/package_gssproxy_removed/rule.yml     | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/linux_os/guide/system/software/system-tools/package_gssproxy_removed/rule.yml b/linux_os/guide/system/software/system-tools/package_gssproxy_removed/rule.yml
index 5f33752d355..62597d4b9cc 100644
--- a/linux_os/guide/system/software/system-tools/package_gssproxy_removed/rule.yml
+++ b/linux_os/guide/system/software/system-tools/package_gssproxy_removed/rule.yml
@@ -8,6 +8,8 @@ description: |-
 
 rationale: |-
     <tt>gssproxy</tt> is a proxy for GSS API credential handling.
+    Kerberos relies some key derivation functions that may not
+    be compatible with some site policies such as FIPS 140.
 
 severity: medium