Add postfix package requirement and audit retention controls to multiple profile controls

[Arden97]

Description:

• Fixing auditd email-related error for cis, pci-dss, stig and hipaa profiles

Rationale:

• We have to ensure that proper mail transfer agent is installed on system by adding package_postfix_installed rule to profile controls
• This PR also reverses changes in Remove auditd_data_retention_action_mail_acct from RHEL 10 CIS #14082, because cis_* option for var_auditd_space_left_action still allows email value for space_left_action in /etc/audit/auditd.conf.
• Fixes auditd complains that /usr/lib/sendmail is not executable after hardening #14560

Review Hints:

• use atex to reserve testing environment and run /scanning/boot-errors/ test for updated profiles

[openshift-ci]

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

[Mab879]

@ComplianceAsCode/suse-maintainers can you please take a look as well?

[teacup-on-rockingchair]

In products/sle15/profiles/pci-dss-4.profile can you please add a line

- !package_postfix_installed

So the checks for missing CCE is not failing for sle15 platform

[teacup-on-rockingchair]

👍

[Mab879]

The following rules in ssg-sle12-ds.xml are missing CCEs:
xccdf_org.ssgproject.content_rule_package_postfix_installed

Can you double check this?

[teacup-on-rockingchair]

The following rules in ssg-sle12-ds.xml are missing CCEs:
xccdf_org.ssgproject.content_rule_package_postfix_installed

Can you double check this?

Hey @Mab879 since @Arden97 was struggling for some time with that one, and it seems that the solution was not obvious simply to exclude the rule from the default and pci-dss profile I suggested in #14612 (comment) that he can go on like this and once he merges his effort I will handle it in a separate PR

[Arden97]

@teacup-on-rockingchair no worries, the solution was to update both sle12 pci-dss profiles that use pcidss_3.yml and I didn't notice pci_dss.profile until recently