False "sources list sanity" CIS benchmark finding, due to Ubuntu 24.04 changed apt configuration files

[UserNotFound]

This rule inspects /etc/apt/sources.list, which is empty in 24.04 due to https://linuxconfig.org/ubuntus-repository-configuration-ubuntu-sources-have-moved-to-etc-apt-sources-list-d-ubuntu-sources

# Section 2.6 Ensure sources.list Sanity
[CIS - Debian Linux - 2.6 - Sources list sanity - Security updates not enabled {CIS: 2.6 Debian Linux} {PCI_DSS: 6.2}] [any] [https://benchmarks.cisecurity.org/tools2/linux/CIS_Debian_Benchmark_v1.0.pdf]
f:!/etc/apt/sources.list;
f:!/etc/apt/sources.list -> !r:^# && r:http://security.debian/|http://security.ubuntu/;

The correct file in 24.04 is /etc/apt/sources.list.d/ubuntu.sources

https://github.com/ossec/ossec-hids/blob/master/src/rootcheck/db/cis_debian_linux_rcl.txt#L80-L83