accounts_passwords_pam_tally2_deny_root fix

[teacup-on-rockingchair]

Description:

• The rule accounts_passwords_pam_tally2_deny_root was failing oval check eventhough remediation was applied correctly

Rationale:

• The regex in the OVAL needed simplification

[github-actions]

Start a new ephemeral environment with changes proposed in this pull request:

rhel8 (from CTF) Environment (using Fedora as testing environment)

Fedora Testing Environment

Oracle Linux 8 Environment

[github-actions]

🤖 A k8s content image for this PR is available at:
ghcr.io/complianceascode/k8scontent:11676
This image was built from commit: a489a0e

Click here to see how to deploy it

If you alread have Compliance Operator deployed:
utils/build_ds_container.py -i ghcr.io/complianceascode/k8scontent:11676

Otherwise deploy the content and operator together by checking out ComplianceAsCode/compliance-operator and:
CONTENT_IMAGE=ghcr.io/complianceascode/k8scontent:11676 make deploy-local

[jan-cerny]

@teacup-on-rockingchair the test scenarios on SLE15 are still failing. Can you take a look into it?

ERROR - Script pam_tally2_deny_missing.fail.sh using profile (all) found issue:
ERROR - Rule evaluation resulted in pass, instead of expected fail during initial stage 
ERROR - The initial scan failed for rule 'xccdf_org.ssgproject.content_rule_accounts_passwords_pam_tally2_deny_root'.

[codeclimate]

Code Climate has analyzed commit a489a0e and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 59.8% (0.0% change).

View more on Code Climate.

[jan-cerny]

I have seen that the Automatus test scenarios are now passing on SLE15. The fail of Automatus on remaining test job is expected because the rule changed in this PR isn't a part of RHEL 8 or RHEL 9 products.

[jan-cerny]

/packit retest-failed