Change sshd_disable_compression applicability

[jan-cerny]

Description:

Makes the rule sshd_disable_compression not applicable for RHEL 7.4 and newer.

Rationale:

RHEL 7 STIG v3r10 says in STIG ID RHEL-07-040470 that "for RHEL 7.4 and above, this requirement is not applicable.".

[github-actions]

Start a new ephemeral environment with changes proposed in this pull request:

Fedora Environment

Oracle Linux 8 Environment

[jan-cerny]

Discussion/question: This applicability change is done for RHEL 7 STIG and will affect also other RHEL 7 profiles, eg. HIPAA, NCP, rhelh-stig, rhelh-vpp. Should we instead create a different rule just for STIG to not affect the other profiles?

[yuumasato]

Discussion/question: This applicability change is done for RHEL 7 STIG and will affect also other RHEL 7 profiles, eg. HIPAA, NCP, rhelh-stig, rhelh-vpp. Should we instead create a different rule just for STIG to not affect the other profiles?

I don't think we need a new rule.
The applicability is related to a behavior that changed in RHEL 7.4 and the profiles should be fine incorporating the new applicability.

[codeclimate]

Code Climate has analyzed commit 070b12e and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 49.7% (0.0% change).

View more on Code Climate.

[jan-cerny]

I have changed the data types in the applicability OVAL file.

[jan-cerny]

/retest

[openshift-ci]

@jan-cerny: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/e2e-aws-ocp4-high	070b12e	link	true	/test e2e-aws-ocp4-high
ci/prow/e2e-aws-rhcos4-moderate	070b12e	link	true	/test e2e-aws-rhcos4-moderate

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.