Latest version of CIS benchmark allows /usr/sbin/nologin or /bin/false for system user account shell configuration so dropping this requirement in this bug.
Latest version of CIS benchmark allows /usr/sbin/nologin or /bin/false for system user account shell configuration so dropping this requirement in this bug.