Update to V1R14

[DMedina6]

This updates the rhel8 profile to the new release (r14).

I've run delta to overwrite the controls, made any necessary implementation changes, and run the linter.

The implementation changes include:

1.

Creation of a new inspec resource called sshd_active_config. It is a subclass to the sshd_config resource.

The new RHEL8 release (r14) has modified all controls that evaluate the /etc/ssh/sshd_config to use active testing instead of passive testing; instead of reading directly from a specified configuration file, the SSHD server is called to return the configuration file that is actively being used.

Before: sudo grep -ir printlastlog /etc/ssh/sshd_config*
After: sudo /usr/sbin/sshd -dd 2>&1 | awk '/filename/ {print $4}' | tr -d '\r' | tr '\n' ' ' | xargs sudo grep -iH '^\sprintlastlog'

This can eventually be merged into the inspec respository, but for now the resource exists in /libraries/sshd_active_config.rb

Affects the following controls: SV-230225 SV-230244 SV-230288 SV-230290 SV-230291 SV-230296 SV-230330 SV-230380 SV-230382 SV-230527 SV-230555 SV-230556 SV-244245 SV-244528.

2.

SV-230279

New release of RHEL8 DISA STIG has modified the SV-230279 control to check if the slub_debug parameter in the /etc/default/grub file CONTAINS 'P' instead of being EQUAL TO 'P'

This is because the slub_debug parameter can contain multiple parameter values in order to enable different debugging , such as 'PFA' or 'FZ'

Regular expression for reading the parameter has been updated to reflect this.

Reference:
[https://www.kernel.org/doc/Documentation/vm/slub.txt](https://www.[kernel.org/doc/Documentation/vm/slub.txt%5D(https://www.kernel.org/doc/Documentation/vm/slub.txt))

3.

SV-230228 has been modified to check for multiple possible configuration files. Implementation has been modified to reflect this change.

4. Misc. Updates

Modify AIDE control to be a slow control and have a fast check (new input aide_check_fast)

This updates SV-251710 to include a fast check input. It is optional. The fast check looks for the existence of the aide database (aide.db.gz) file.

New input called container_host to check if system needs to be able to host containers

Modifies SV-251710 control to include an input specifying whether the system being scanned is meant to act as a host for containers or not, skipping the control if it is.

Result files for current main branch and new v1r14 release:
v1r13-results.json
v1r14-results.json