Enforce explicit setting in system-auth

[jan-cerny]

The rule passes if the rounds option isn't set but the profile uses a value that equals to system default value. This will no longer be possible. We will always require rounds to be set explicitly. The reason is to align the rule with DISA STIG.

The commit also updates the test scenarios to fail if the rounds isn't set and system default is used.

Fixes: #11697

[github-actions]

Start a new ephemeral environment with changes proposed in this pull request:

rhel8 (from CTF) Environment (using Fedora as testing environment)

Fedora Testing Environment

Oracle Linux 8 Environment

[github-actions]

This datastream diff is auto generated by the check Compare DS/Generate Diff

Click here to see the full diff

OVAL for rule 'xccdf_org.ssgproject.content_rule_accounts_password_pam_unix_rounds_system_auth' differs.
--- oval:ssg-accounts_password_pam_unix_rounds_system_auth:def:1
+++ oval:ssg-accounts_password_pam_unix_rounds_system_auth:def:1
@@ -1,5 +1,2 @@
 criteria OR
 criterion oval:ssg-test_system_auth_pam_unix_rounds_is_set:tst:1
-criteria AND
-criterion oval:ssg-test_system_auth_pam_unix_rounds_is_default:tst:1
-criterion oval:ssg-test_system_auth_default_pam_unix_rounds_var:tst:1

[github-actions]

🤖 A k8s content image for this PR is available at:
ghcr.io/complianceascode/k8scontent:11740
This image was built from commit: 8c77155

Click here to see how to deploy it

If you alread have Compliance Operator deployed:
utils/build_ds_container.py -i ghcr.io/complianceascode/k8scontent:11740

Otherwise deploy the content and operator together by checking out ComplianceAsCode/compliance-operator and:
CONTENT_IMAGE=ghcr.io/complianceascode/k8scontent:11740 make deploy-local

[codeclimate]

Code Climate has analyzed commit 8c77155 and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 59.3% (0.0% change).

View more on Code Climate.

[Mab879]

Tests pass locally in a VM.