Add support for multiple STIG id assignments

[ggbecker]

Description:

• Add support for multiple STIG id assignments.

Rationale:

• Ability to assign multiple STIG ids to stigid reference, comma separated.
• Help with testing of the feature is appreciated.

Review Hints:

• oscap xccdf eval --profile stig --rule xccdf_org.ssgproject.content_rule_accounts_passwords_pam_faillock_interval --results results.xml --stig-viewer results-stig.xml ssg-rhel8-ds.xml
• results-stig.xml should contain two results such as:

  <rule-result idref="SV-230334r627750_rule" role="full" time="2023-07-14T07:37:00-05:00" severity="medium" weight="1.000000">
    <result>fail</result>
    <ident system="https://ncp.nist.gov/cce">CCE-80669-5</ident>
    <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <check-export export-name="oval:ssg-var_accounts_passwords_pam_faillock_fail_interval:var:1" value-id="xccdf_org.ssgproject.content_value_var_accounts_passwords_pam_faillock_fail_interval"/>
      <check-content-ref name="oval:ssg-accounts_passwords_pam_faillock_interval:def:1" href="ssg-rhel8-oval.xml"/>
    </check>
  </rule-result>
  <rule-result idref="SV-230335r743969_rule" role="full" time="2023-07-14T07:37:00-05:00" severity="medium" weight="1.000000">
    <result>fail</result>
    <ident system="https://ncp.nist.gov/cce">CCE-80669-5</ident>
    <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <check-export export-name="oval:ssg-var_accounts_passwords_pam_faillock_fail_interval:var:1" value-id="xccdf_org.ssgproject.content_value_var_accounts_passwords_pam_faillock_fail_interval"/>
      <check-content-ref name="oval:ssg-accounts_passwords_pam_faillock_interval:def:1" href="ssg-rhel8-oval.xml"/>
    </check>
  </rule-result>

After that you can import https://github.com/ComplianceAsCode/content/raw/master/shared/references/disa-stig-rhel8-v1r10-xccdf-manual.xml into STIG viewer, create a checklist and then you can import the results-stig.xml file.

STIG viewer can be found on: https://public.cyber.mil/stigs/srg-stig-tools/

[openshift-ci]

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

[github-actions]

Start a new ephemeral environment with changes proposed in this pull request:

Fedora Environment

Oracle Linux 8 Environment

[ggbecker]

rebased on latest master

[codeclimate]

Code Climate has analyzed commit 2ee7547 and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 0.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 53.3% (-0.1% change).

View more on Code Climate.

[Mab879]

I can confirm that this works correctly in STIG Viewer 2.17.

[vojtapolasek]

Thank you for the changes, they look good to me.