diff --git a/group.yml b/group.yml
index 8ecc946319..91e6dde759 100644
--- a/group.yml
+++ b/group.yml
@@ -100,8 +100,8 @@ rhcos:
   require_consistency:
     driver-toolkit:
     - kernel  # since 9.3, kernel-rt is merged into the kernel package.
-  exempt_rpms: # skip check these rpms as they will aligned with rhel base image in rhcos
-  - libreswan
+    ose-ovn-kubernetes:
+    - libreswan
   allow_missing_brew_rpms: false
 
 check_external_packages:
diff --git a/images/ose-ovn-kubernetes.yml b/images/ose-ovn-kubernetes.yml
index 364816fd73..4ea38d52a8 100644
--- a/images/ose-ovn-kubernetes.yml
+++ b/images/ose-ovn-kubernetes.yml
@@ -37,7 +37,6 @@ scan_sources:
   # We should configure exemptions for those known pins to avoid meaningless rebuild.
   # https://github.com/openshift/ovn-kubernetes/blob/e236fea83d62de8b60b9456770a3e0b525830051/Dockerfile.base#L22
   exempt_rpms:
-  - libreswan*
   - openvswitch*
   - ovn*
   - python3-openvswitch*
diff --git a/images/ovn-kubernetes-base.yml b/images/ovn-kubernetes-base.yml
index 33296f1684..6cb692c39f 100644
--- a/images/ovn-kubernetes-base.yml
+++ b/images/ovn-kubernetes-base.yml
@@ -28,7 +28,6 @@ scan_sources:
   # We should configure exemptions for those known pins to avoid meaningless rebuild.
   # https://github.com/openshift/ovn-kubernetes/blob/e236fea83d62de8b60b9456770a3e0b525830051/Dockerfile.base#L22
   exempt_rpms:
-  - libreswan
   - openvswitch*
   - ovn*
   - python3-openvswitch*
diff --git a/images/ovn-kubernetes-microshift.yml b/images/ovn-kubernetes-microshift.yml
index 4cff041d97..e865291386 100644
--- a/images/ovn-kubernetes-microshift.yml
+++ b/images/ovn-kubernetes-microshift.yml
@@ -37,7 +37,6 @@ scan_sources:
   # We should configure exemptions for those known pins to avoid meaningless rebuild.
   # https://github.com/openshift/ovn-kubernetes/blob/e236fea83d62de8b60b9456770a3e0b525830051/Dockerfile.base#L22
   exempt_rpms:
-  - libreswan
   - openvswitch*
   - ovn*
   - python3-openvswitch*