diff --git a/spec/configuration/firewall_spec.rb b/spec/configuration/firewall_spec.rb
index 5ee7bca..1047f48 100644
--- a/spec/configuration/firewall_spec.rb
+++ b/spec/configuration/firewall_spec.rb
@@ -34,7 +34,9 @@
     '2058/tcp',   # (n2klocd)
     '161/udp',    # (snmp)
     '162/udp',    # (snmp)
-    '123/udp'     # (chrony)
+    '123/udp',    # (chrony)
+    '7777/tcp',   # (rb-reputation)
+    '9191/tcp'    # (airflow-webserver)
   ]
   describe 'Check existence of not allowed open ports in public zone' do
     open_ports = command('firewall-cmd --zone=public --list-ports')
@@ -91,10 +93,12 @@
       '8500/tcp',   # (consul web console)
       '9092/tcp',   # (kafka)
       '11211/tcp',  # (memcached)
-      '11211/udp', # (memcached)
-      '11434/tcp', # (redborder-agents)
-      '26379/tcp', # (redis)
-      '26380/tcp' # (redis-sentinel)
+      '11211/udp',  # (memcached)
+      '11434/tcp',  # (redborder-agents)
+      '26379/tcp',  # (redis)
+      '26380/tcp',  # (redis-sentinel)
+      '7777/tcp',   # (rb-reputation)
+      '9191/tcp'    # (airflow-webserver)
     ]
 
     open_ports = command('firewall-cmd --zone=home --list-ports')
diff --git a/spec/users/users_spec.rb b/spec/users/users_spec.rb
index 0782fcf..f37c73c 100644
--- a/spec/users/users_spec.rb
+++ b/spec/users/users_spec.rb
@@ -12,7 +12,7 @@
   bash_users.map! { |p| p.split(':').first }
   bash_users = Set.new bash_users
 
-  allowed_users = Set.new %w[root redborder postgres minio]
+  allowed_users = Set.new %w[root redborder postgres minio malware]
   not_allowed_users = bash_users - allowed_users
 
   describe 'users with login permissions' do