Add new rule logging_services_active

[mpurg]

Description:

• Checks that one of rsyslog/systemd-journald is active.
• Add rule to Ubuntu 24.04 CIS controls
• Fix metadata in rule firewall_single_service_active

Rationale:

• Satisfies Ubuntu 24.04 CIS control 6.1.1.4

[openshift-ci]

Hi @mpurg. Thanks for your PR.

I'm waiting for a ComplianceAsCode member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[github-actions]

Start a new ephemeral environment with changes proposed in this pull request:

ubuntu2404 (from CTF) Environment (using Fedora as testing environment)

Fedora Testing Environment

Oracle Linux 8 Environment

[dodys]

@mpurg could you take a look at the failed tests?

[mpurg]

Rebased and added cosmetic fix to tests.

Automatus fails are due to systemd not existing in container, same issue as #12511
Works on KVM:

INFO - xccdf_org.ssgproject.content_rule_firewall_single_service_active
INFO - Script single.pass.sh using profile (all) OK
INFO - Script none.fail.sh using profile (all) OK
INFO - Script multiple.fail.sh using profile (all) OK
INFO - xccdf_org.ssgproject.content_rule_logging_services_active
INFO - Script none.fail.sh using profile (all) OK
INFO - Script multiple.pass.sh using profile (all) OK
INFO - Script journald.pass.sh using profile (all) OK

ctests:

100% tests passed, 0 tests failed out of 33

[codeclimate]

Code Climate has analyzed commit 32dbd43 and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 61.9% (0.0% change).

View more on Code Climate.

[dodys]

lgtm, thanks!