Skip users with ID above UID MAX on accounts_user_interactive_home_directory_defined

[Mab879]

Description:

To skip systemd dynamic users.
Since accounts_user_interactive_home_directory_defined only works on local users this should be fine.

Since bash remediation accesses /etc/passwd directly and the systemd dynamic users do not show up in that file, the bash remediation was not updated.

Rationale:

Fix Ansible playbook failures.

[github-actions]

Start a new ephemeral environment with changes proposed in this pull request:

rhel8 (from CTF) Environment (using Fedora as testing environment)

Fedora Testing Environment

Oracle Linux 8 Environment

[github-actions]

This datastream diff is auto generated by the check Compare DS/Generate Diff

Click here to see the full diff

ansible remediation for rule 'xccdf_org.ssgproject.content_rule_accounts_user_interactive_home_directory_defined' differs.
--- xccdf_org.ssgproject.content_rule_accounts_user_interactive_home_directory_defined
+++ xccdf_org.ssgproject.content_rule_accounts_user_interactive_home_directory_defined
@@ -34,6 +34,7 @@
   when:
   - item.value[2]|int >= 1000
   - item.value[2]|int != 65534
+  - item.value[2]|int < 61184 or item.value[2]|int > 61184
   - not item.value[4] | regex_search('^\/\w*\/\w{1,}')
   tags:
   - CCE-84036-3

[dodys]

lgtm, thanks!
Ubuntu CI failures is because this rule is not present in our benchmarks

[vojtapolasek]

Looks good. See my specific comment.
out of curiosity, why in the past it did not matter that test files for some distros in tests/data/product_stability do not exist? It makes this PR quite big.

[vojtapolasek]

Maybe the number can be this one, per http://0pointer.net/blog/dynamic-users-with-systemd.html, you can see it few lines under the heading called "Introducing dynamic users".

Suggested change

	uid_max: 60000
	uid_max: 60183

[Xeicker]

changes LGTM

[codeclimate]

Code Climate has analyzed commit d8f7855 and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 60.9% (0.0% change).

View more on Code Climate.