Implement ANSSI requirement R69 for RHEL

[vojtapolasek]

Description:

• add two similar rules which check for presence of obsolete services in /etc/nsswitch.conf
• each rule has only OVAL check, as remediation should be done manually
• services are NIS and Hesiod
• the wording of the requirement is updated

Rationale:

• ANSSI 2.0 alignment

[github-actions]

Start a new ephemeral environment with changes proposed in this pull request:

rhel8 (from CTF) Environment (using Fedora as testing environment)

Fedora Testing Environment

Oracle Linux 8 Environment

[github-actions]

🤖 A k8s content image for this PR is available at:
ghcr.io/complianceascode/k8scontent:11663
This image was built from commit: 592d94b

Click here to see how to deploy it

If you alread have Compliance Operator deployed:
utils/build_ds_container.py -i ghcr.io/complianceascode/k8scontent:11663

Otherwise deploy the content and operator together by checking out ComplianceAsCode/compliance-operator and:
CONTENT_IMAGE=ghcr.io/complianceascode/k8scontent:11663 make deploy-local

[Mab879]

The failure on building the HTML seems suspicious, can you please investigate?

[jan-cerny]

The utils/gen_rendered_policies_index.py doesn't support jinja macros in control files, you need to change that because jinja macros should be allowed in control files.

[vojtapolasek]

The error while generating HTML pages is caused by the script gen_rendered_policies_index because it can't handle Jinja. Investigating...

[vojtapolasek]

I propose fix here: #11667

[Mab879]

I merged #11667 so you should be able rebase this PR to resolve the CI issues.

[Mab879]

Just a few issues.

Thanks for the PR!

[vojtapolasek]

Thank you for suggestions, applied.

[codeclimate]

Code Climate has analyzed commit 592d94b and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 59.8% (0.0% change).

View more on Code Climate.