Update OL OSPP profiles

[freddieRv]

Signed-off-by: Federico Ramirez federico.r.ramirez@oracle.com

Description:

• Update OL8 OSPP profile to be in sync with RHEL8 one
• Add OSPP profile for OL7 based on RHEL7 one

Rationale:

• OL profiles effort

[openshift-ci-robot]

Hi @freddieRv. Thanks for your PR.

I'm waiting for a ComplianceAsCode member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[openscap-ci]

Changes identified:
Profiles:
 ospp on ol7
 ospp on ol8
 cui on ol8

Show details

Profile ospp on ol7:
 Newly added profile.
Profile ospp on ol8:
 Rule package_chrony_installed, sshd_use_strong_rng, configure_ssh_crypto_policy, package_rsyslog-gnutls_installed, rsyslog_remote_tls, service_kdump_disabled, package_gnutls-utils_installed, rsyslog_remote_tls_cacert, ssh_client_rekey_limit, use_pam_wheel_for_su, package_rsyslog_installed, package_audispd-plugins_installed, openssl_use_strong_entropy, ssh_client_use_strong_rng_csh, grub2_kernel_trust_cpu_rng, ssh_client_use_strong_rng_sh added to ospp profile.
 Variable var_ssh_client_rekey_limit_time=1hour, var_rekey_limit_size=1G, var_rekey_limit_time=1hour, var_ssh_client_rekey_limit_size=1G added to ospp profile.
 Rule package_pigz_removed, service_rngd_enabled, package_tuned_removed, package_iptables_installed, package_rng-tools_installed removed from ospp profile.
Profile cui on ol8:
 CUI profile extends changed OSPP profile.

Recommended tests to execute:
 build_product rhel8
 build_product ol8
 tests/test_suite.py profile --libvirt qemu:///system test-suite-vm --datastream build/ssg-ol8-ds.xml cui
 tests/test_suite.py profile --libvirt qemu:///system test-suite-vm --datastream build/ssg-ol8-ds.xml ospp
 build_product ol7
 tests/test_suite.py profile --libvirt qemu:///system test-suite-vm --datastream build/ssg-ol7-ds.xml ospp

[yuumasato]

The profile additions and rule changes look OK to me.