Remove display_login_attempts from Ubuntu 24.04's default profile

[arian-zetier]

Description:

Ubuntu 24.04 does not ship with pam_lastlog in its modules, and pam_lastlog2 (its successor) is not available. #14666 was reported by another user with much better details and references the relevant changes, though the big issue is that applying display_login_attempts's remediation to a 24.04 machine locks the user out from the tty console making it inaccessible in offline environments.

Rationale:

UBTU-24-300024 (V-270710) was removed in V1R5 STIG, and I do not see anything related to it for CIS, hence why it was removed from the default profile, though let me know if that's not the case. This was also removed in ansible-lockdown/UBUNTU24-STIG-Audit@97ce781

This would close #14666

Thanks!

[openshift-ci]

Hi @arian-zetier. Thanks for your PR.

I'm waiting for a ComplianceAsCode member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[Mab879]

This will remove the rule from the data stream and can break things like tailoring. @ComplianceAsCode/ubuntu-maintainers is that acceptable?