diff --git a/cfg/2.0.0/definitions.yaml b/cfg/2.0.0/definitions.yaml
index dbc20ae..62d975e 100644
--- a/cfg/2.0.0/definitions.yaml
+++ b/cfg/2.0.0/definitions.yaml
@@ -399,7 +399,7 @@ groups:
             
     - id: 1.1.5
       description: "Ensure noexec option set on /tmp partition"
-      audit: "mount | grep /tmp"   
+      audit: "mount | grep -E '\\s/tmp\\s' | grep -v noexec"   
       tests:
         test_items:
         - flag: ""