templates/mount_option: Switch mount Ansible remediation module's state back to 'mounted'

[evgenyz]

Description:

• With the way the remediation works (a step for every option to check), it overwrites previously fixed /etc/fstab entry with obsolete data if the mount point is not re-mounted.
• This might cause problems for offline systems, but we are not going to use Ansible for offline remediation. At least for now.

Rationale:

• Fixes mount_option_dev_shm_noexec fails after remediation #10391.
• Fixes Test for rule mount_option_var_log_audit_nosuid do not pass when using Ansible Remedations #10418.

[github-actions]

Start a new ephemeral environment with changes proposed in this pull request:

Fedora Environment

Oracle Linux 8 Environment

[codeclimate]

Code Climate has analyzed commit 858ff21 and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 52.4% (0.0% change).

View more on Code Climate.

[Mab879]

Can you please propose this to the stabilization branch as well?

[marcusburghardt]

I confirm the PR fixes both issues mentioned in the description:

rhel8 - mount_option_dev_shm_noexec - bash VM
Setting console output to log level INFO
INFO - The base image option has not been specified, choosing libvirt-based test environment.
INFO - xccdf_org.ssgproject.content_rule_mount_option_dev_shm_noexec
INFO - Script runtime.pass.sh using profile (all) OK
INFO - Script separate.pass.sh using profile (all) OK
INFO - Script fstab.fail.sh using profile (all) OK
INFO - Script no_partition.fail.sh using profile (all) OK

rhel8 - mount_option_dev_shm_noexec - ansible VM
Setting console output to log level INFO
INFO - The base image option has not been specified, choosing libvirt-based test environment.
INFO - xccdf_org.ssgproject.content_rule_mount_option_dev_shm_noexec
INFO - Script separate.pass.sh using profile (all) OK
INFO - Script fstab.fail.sh using profile (all) OK
INFO - Script runtime.pass.sh using profile (all) OK
INFO - Script no_partition.fail.sh using profile (all) OK

rhel8 - mount_option_var_log_audit_nosuid - bash VM
Setting console output to log level INFO
INFO - The base image option has not been specified, choosing libvirt-based test environment.
INFO - xccdf_org.ssgproject.content_rule_mount_option_var_log_audit_nosuid
INFO - Script fstab.fail.sh using profile (all) OK
INFO - Script separate.pass.sh using profile (all) OK
INFO - Script runtime.pass.sh using profile (all) OK

rhel8 - mount_option_var_log_audit_nosuid - ansible VM
Setting console output to log level INFO
INFO - The base image option has not been specified, choosing libvirt-based test environment.
INFO - xccdf_org.ssgproject.content_rule_mount_option_var_log_audit_nosuid
INFO - Script fstab.fail.sh using profile (all) OK
INFO - Script separate.pass.sh using profile (all) OK
INFO - Script runtime.pass.sh using profile (all) OK

[marcusburghardt]

LGTM. Could you also propose it to the stabilization branch, please?