diff --git a/salt/stig/files/sos-oscap.xml b/salt/stig/files/sos-oscap.xml
index bc7289e9b..3f78af8c0 100644
--- a/salt/stig/files/sos-oscap.xml
+++ b/salt/stig/files/sos-oscap.xml
@@ -649,11 +649,11 @@ the release. Additionally, the original security profile has been modified by Se
         <ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_passwords_pam_faillock_interval" selected="true" />
         <ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_passwords_pam_faillock_unlock_time" selected="true" />
         <ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_tmout" selected="true" />
-        <ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_etc_bashrc" selected="true" />
-        <ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_etc_csh_cshrc" selected="true" />
-        <ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_etc_login_defs" selected="true" />
-        <ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_etc_profile" selected="true" />
-        <ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_interactive_users" selected="true" />
+        <ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_etc_bashrc" selected="false" />
+        <ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_etc_csh_cshrc" selected="false" />
+        <ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_etc_login_defs" selected="false" />
+        <ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_etc_profile" selected="false" />
+        <ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_interactive_users" selected="false" />
         <ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_user_dot_no_world_writable_programs" selected="true" />
         <ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_user_home_paths_only" selected="true" />
         <ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_user_interactive_home_directory_defined" selected="true" />
@@ -1109,7 +1109,7 @@ the release. Additionally, the original security profile has been modified by Se
         <ns5:select idref="xccdf_org.ssgproject.content_group_configure_logwatch_on_logserver" selected="true" />
         <ns5:select idref="xccdf_org.ssgproject.content_group_configure_printing" selected="true" />
         <ns5:select idref="xccdf_org.ssgproject.content_group_configuring_samba" selected="true" />
-        <ns5:select idref="xccdf_org.ssgproject.content_group_daemon_umask" selected="true" />
+        <ns5:select idref="xccdf_org.ssgproject.content_group_daemon_umask" selected="false" />
         <ns5:select idref="xccdf_org.ssgproject.content_group_deprecated" selected="true" />
         <ns5:select idref="xccdf_org.ssgproject.content_group_dhcp" selected="true" />
         <ns5:select idref="xccdf_org.ssgproject.content_group_dhcp_client_configuration" selected="true" />