Implements handler for "<OS> must authenticate the remote logging server for offloading audit logs via rsyslog" finding

[ferricoxide]

Closes #557

When run on a system with no /etc/rsyslog.d/*.conf files containing a $ActionSendStreamDriverAuthMode setting, run-output looks like:

----------
           ID: ALMA-09-052600-description
     Function: test.show_notification
       Result: True
      Comment: ----------------------------------------
               STIG Finding ID: ALMA-09-052600
                   The OS must authenticate the remote
                   logging server for offloading audit
                   logs via rsyslog
               ----------------------------------------
      Started: 17:48:15.777285
     Duration: 0.677 ms
      Changes:
 ----------
           ID: Fix $ActionSendStreamDriverAuthMode setting in /etc/rsyslog.conf (ALMA-09-052600)
     Function: file.replace
         Name: /etc/rsyslog.conf
       Result: True
      Comment: Changes were made
      Started: 17:48:15.778113
     Duration: 6.497 ms
      Changes:
               ----------
               diff:
                   ---
                   +++
                   @@ -82,3 +82,4 @@
                    auth.* /var/log/secure
                    daemon.* /var/log/messages

                   +# Set per rule ALMA-09-052600
                   $ActionSendStreamDriverAuthMode x509/name
 ----------
           ID: Re-read rsyslog configuration-options
     Function: service.running
         Name: rsyslog.service
       Result: True
      Comment: Service restarted
      Started: 17:48:16.223369
     Duration: 853.961 ms
      Changes:
               ----------
               rsyslog.service:
                   True
 ----------

When run on a system with /etc/rsyslog.d/*.conf files containing conflicting values for the $ActionSendStreamDriverAuthMode setting, run-output looks like:

----------
          ID: ALMA-09-052600-description
    Function: test.show_notification
      Result: True
     Comment: ----------------------------------------
              STIG Finding ID: ALMA-09-052600
                  The OS must authenticate the remote
                  logging server for offloading audit
                  logs via rsyslog
              ----------------------------------------
     Started: 17:58:25.151096
    Duration: 0.716 ms
     Changes:
----------
          ID: Fix $ActionSendStreamDriverAuthMode setting in /etc/rsyslog.d/stream_driver_auth.conf (ALMA-09-052600)
    Function: file.replace
        Name: /etc/rsyslog.d/stream_driver_auth.conf
      Result: True
     Comment: Changes were made
     Started: 17:58:25.154526
    Duration: 8.325 ms
     Changes:
              ----------
              diff:
                  ---
                  +++
                  @@ -1 +1 @@
                  -$ActionSendStreamDriverAuthMode x509/fingerprint
                  +$ActionSendStreamDriverAuthMode x509/name
----------
          ID: Re-read rsyslog configuration-options
    Function: service.running
        Name: rsyslog.service
      Result: True
     Comment: Service restarted
     Started: 17:58:27.077816
    Duration: 748.356 ms
     Changes:
              ----------
              rsyslog.service:
                  True
------------

When run on a system with /etc/rsyslog.d/*.conf files containing conformant values for the $ActionSendStreamDriverAuthMode setting, run-output looks like:

----------
          ID: ALMA-09-052600-description
    Function: test.show_notification
      Result: True
     Comment: ----------------------------------------
              STIG Finding ID: ALMA-09-052600
                  The OS must authenticate the remote
                  logging server for offloading audit
                  logs via rsyslog
              ----------------------------------------
     Started: 17:56:45.654166
    Duration: 0.834 ms
     Changes:
----------
          ID: Fix $ActionSendStreamDriverAuthMode setting in /etc/rsyslog.d/stream_driver_auth.conf (ALMA-09-052600)
    Function: file.replace
        Name: /etc/rsyslog.d/stream_driver_auth.conf
      Result: True
     Comment: No changes needed to be made
     Started: 17:56:45.658235
    Duration: 6.184 ms
     Changes:
----------
          ID: Re-read rsyslog configuration-options
    Function: service.running
        Name: rsyslog.service
      Result: True
     Comment: The service rsyslog.service is already running
     Started: 17:56:45.680265
    Duration: 2615.903 ms
     Changes:
------------