Update network_sniffer_disabled

[vojtapolasek]

Description:

• minor change in ocil

• add tests

Rationale:

per https://vaulted.io/library/disa-stigs-srgs/red_hat_enterprise_linux_7_security_technical_implementation_guide/V-72295?version=v2r7

stig effort

[redhatrises]

Since we are updating the rule, let's update the description while we are here.

    The system should not be acting as a network sniffer, which can
    capture all traffic on the network to which it is connected. Run the following
    to determine if any interface is running in promiscuous mode:
    <pre>$ ip link | grep PROMISC</pre>
    Promiscuous mode of an interface can be disabled with the following command:
    <pre>$ sudo ip link set dev <tt>device_name</tt> promisc off</pre>

[JAORMX]

/retest

[vojtapolasek]

I have modified ocil and description.

[openshift-ci-robot]

@vojtapolasek: The following test failed, say /retest to rerun all failed tests:

Test name	Commit	Details	Rerun command
ci/prow/e2e-aws-rhcos4-moderate	e726e69	link	/test e2e-aws-rhcos4-moderate

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.