Added provisional remediation to audit rules.

[matejak]

The remediation copies part of the recommended audit config that should assure OSPP compliance.

Disadvantage: The remediation fixes more than one rule at time.

Advantage: This is the way how to fix the issue from the audit project's point of view + we can guarantee related audit rule ordering.

[yuumasato]

@matejak I know there aren't merge conflicts, but when I scan and remediate, some rules that should be passing are failing.
To clear out the doubt whether the failures are due to outdated master or current issues, can you please rebase on top of latest master?

[matusmarhefka]

@yuumasato Yes, the branch is not updated and is missing some important commits from the master.

[yuumasato]

A few comments.

[yuumasato]

For some reason, the report of the remediation run fails on rules:

• audit_rules_unsuccessful_file_modification_open_rule_order
• audit_rules_unsuccessful_file_modification_openat_rule_order
• audit_rules_unsuccessful_file_modification_open_by_handle_at_rule_order

But on second scan, these rules pass.

Edit: copy paste error

[matusmarhefka]

We need to add remediations also for:

• audit_rules_unsuccessful_file_modification_open_rule_order
• audit_rules_unsuccessful_file_modification_openat_rule_order
• audit_rules_unsuccessful_file_modification_open_by_handle_at_rule_order

[matejak]

Rebased, changed according to input.

[scrutinizer-notifier]

The inspection completed: 3 new issues

[matusmarhefka]

All the audit rules are passing after the latest updates 🙂

[matusmarhefka]

@matejak Good job, thank you.

[yuumasato]

Also ACK, I understand the solution is not ideal, and these remediations should be improved in the future.