There should be rules in this package, but there aren't. The rules are actually in the Microsoft or Linux product packages. We are fixing that.
In fact, this package is going away soon. It will be replaced by two packages, one for users and one for hosts. This is because all devices tend to have accounts, account management, configurations, and errors, not just operating systems.
Hope this helps,