minor fixes

[xtreme-nitin-ravindran]

• V-75445: locking root password by passwd -l root set paasowrd to !*.

# grep root /etc/shadow
root:!*:18472:0:99999:7:::

• V-75529: Remove extra \s around true

# ruby -e 'puts /^\s*([^\s]*::Remove-Unused-Dependencies)\s*\\"true\\"\s*;$/.match("Unattended-Upgrade::Remove-Unused-Dependencies \"true\"")'

# ruby -e 'puts /^\s*([^\s]*::Remove-Unused-Dependencies)\s*\"true\"\s*;$/.match("Unattended-Upgrade::Remove-Unused-Dependencies \"true\";")'
Unattended-Upgrade::Remove-Unused-Dependencies "true";

• V-75789: Path to pam_timestamp_check is /usr/sbin/pam_timestamp_check

# which pam_timestamp_check
/usr/sbin/pam_timestamp_check

• V-75797: Rule should check for telnetd instead of telnet

[superyarick]

Good catch on the Telnet. Double-check the "/usr/sbin/pam_timestamp_check" fix as it is still failing.

  ×  V-75789: Successful/unsuccessful uses of the pam_timestamp_check command must
  generate an audit record.
     ×  Control Source Code Error ./controls/V-75789.rb:3 
     undefined method `index' for nil:NilClass

[xtreme-nitin-ravindran]

@superyarick The error is unrelated to the change to the pam_timestamp_check path.

It is caused by line

audit_lines_exist = !auditd.lines.index { |line| line.include?(@audit_file) }.nil?

auditd.lines is nil when using dokken driver. There are other controls having the same error V-75775, V-75767, V-75695, etc.

The error does not show up when using vagrant driver.

The errors also occur on master branch

[aaronlippold]

So if we add in platform.docker? or similar we should be able to adjust this test so it runs or skips correctly in both the container context and the vm context