CIS Benchmark - check fail

Hello,
I’m running Rancher v2.5.8 and one RKE cluster in v1.19.10. I tested CIS benchmark and I get some check in fail state:

I check manually and it should be OK. So I don’t understand why it is in fail state. Any idea?

About my RKE cluster:
3 nodes in RancherOS v1.5.6, one master, two workers
Docker v19.03.11
RKE in v1.19.10
Canal

Thanks,
Yannaël