update ism_o profiles for RHEL 10

[vojtapolasek]

Description:

• enable Ansible remediation for network_nmcli_permissions
• exclude some problematic rules, see comments in the file. Here are some explanations of rules which are not excluded but they are shown as failing:
  • enable_ldap_client - no remediation, but the rule seems quite valid, I consider it as remediated manually
  • audit_rules_unsuccessful_file_modification - no Ansible remediation
  • audit_rules_login_events - no Ansible remediation
  • rsyslog_remote_tls_cacert - no remediation, should be remediated manually
  • network_ipv6_static_address - should be remediated manually

Rationale:

• update of profiles for RHEL 10

Review Hints:

• run automatus in profile mode against RHEL 10 machine

[github-actions]

Start a new ephemeral environment with changes proposed in this pull request:

Fedora Environment

Oracle Linux 8 Environment

[github-actions]

🤖 A k8s content image for this PR is available at:
ghcr.io/complianceascode/k8scontent:12418
This image was built from commit: 1fefa5a

Click here to see how to deploy it

If you alread have Compliance Operator deployed:
utils/build_ds_container.py -i ghcr.io/complianceascode/k8scontent:12418

Otherwise deploy the content and operator together by checking out ComplianceAsCode/compliance-operator and:
CONTENT_IMAGE=ghcr.io/complianceascode/k8scontent:12418 make deploy-local

[codeclimate]

Code Climate has analyzed commit 1fefa5a and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 59.5% (0.0% change).

View more on Code Climate.

[marcusburghardt]

LGTM. Thanks @vojtapolasek