v1.14.0

[DMedina6]

This is the correct PR with the latest updates

This updates the rhel8 profile to the new release (r14).

I've run delta to overwrite the controls, made any necessary implementation changes, and run the linter.

The implementation changes include:

Creation of a new inspec resource called sshd_active_config. It is a subclass to the sshd_config resource.

The new RHEL8 release (r14) has modified all controls that evaluate the /etc/ssh/sshd_config to use active testing instead of passive testing; instead of reading directly from a specified configuration file, the SSHD server is called to return the configuration file that is actively being used.

Before: sudo grep -ir printlastlog /etc/ssh/sshd_config*
After: sudo /usr/sbin/sshd -dd 2>&1 | awk '/filename/ {print $4}' | tr -d '\r' | tr '\n' ' ' | xargs sudo grep -iH '^\sprintlastlog'

This can eventually be merged into the inspec respository, but for now the resource exists in /libraries/sshd_active_config.rb

Affects the following controls: SV-230225 SV-230244 SV-230288 SV-230290 SV-230291 SV-230296 SV-230330 SV-230380 SV-230382 SV-230527 SV-230555 SV-230556 SV-244245 SV-244528.

SV-230279

New release of RHEL8 DISA STIG has modified the SV-230279 control to check if the slub_debug parameter in the /etc/default/grub file CONTAINS 'P' instead of being EQUAL TO 'P'

This is because the slub_debug parameter can contain multiple parameter values in order to enable different debugging , such as 'PFA' or 'FZ'

Regular expression for reading the parameter has been updated to reflect this.

Reference:
[https://www.kernel.org/doc/Documentation/vm/slub.txt]([https://www.kernel.org/doc/Documentation/vm/slub.txt%5D(https://www.kernel.org/doc/Documentation/vm/slub.txt))

SV-230228 has been modified to check for multiple possible configuration files. Implementation has been modified to reflect this change.

Misc. Updates:

Modify AIDE control to be a slow control and have a fast check (new input aide_check_fast)
This updates SV-251710 to include a fast check input. It is optional. The fast check looks for the existence of the aide database (aide.db.gz) file.
New input called container_host to check if system needs to be able to host containers
Modifies SV-251710 control to include an input specifying whether the system being scanned is meant to act as a host for containers or not, skipping the control if it is.