Create runtime_kernel_fips_enabled cpe and apply it to service_rngd_enabled for OL8

[Xeicker]

Description:

• Introduce the cpe runtime_kernel_fips_enabled
• Update platform in service_rngd_enabled rule to restrict the usage depending on OL version and runtime_kernel_fips_enabled cpe

Rationale:

• With new OL8 STIG V1R7 it was updated the applicability of the requirement implemented by service_rngd_enabled:

Note: For OL versions 8.4 and above running with kernel FIPS mode enabled as specified by OL08-00-010020, this requirement is not applicable.

• It is known that the kernel parameter is not enough to declare a system in FIPS mode, however in this case as rngd is related to kernel entropy, this should be enough to validate applicability.

[openshift-ci]

Hi @Xeicker. Thanks for your PR.

I'm waiting for a ComplianceAsCode member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[github-actions]

Start a new ephemeral environment with changes proposed in this pull request:

Fedora Environment

Oracle Linux 8 Environment

[codeclimate]

Code Climate has analyzed commit 4b2261b and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 53.2% (0.0% change).

View more on Code Climate.

[mildas]

/packit retest-failed

[jan-cerny]

I have built the OL 8 content and reviewed the rule's platform and related OVAL checks.