Fix conflict with file_permissions* rules fails in RHEL9 BSI SYS.1.3

[Arden97]

Description:

• These changes add the package_cron_installed rule that installs the cron package before all cron-related checks are executed

Rationale:

• all rules in the cron_and_at group pass even when no cron files are found.

• after these checks, aide_periodic_cron_checking is executed, which installs the cron package.

• A subsequent check finds the cron files in their default state

  • file_groupowner_cron* and file_owner_cron* rules are passing, because the default state of the cron files satisfies the rule requirements
  • file_permissions_cron* rules fail, because default cron permissions are 755 (instead of the required 700)

• Fixes file_permissions and rpm_verify_permissions rules conflict with each other (BSI profile) #13844

Review Hints:

• reserve testing farm with hvm support
• run /hardening/container/bootc-image-builder/bsi using autocontest

[openshift-ci]

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

[github-actions]

ATEX Test Results

Test artifacts have been submitted to Testing Farm.

Results: View Test Results
Workflow Run: View Workflow Details

This comment was automatically generated by the ATEX workflow.

[jan-cerny]

Should we do the same change also in the RHEL 10 BSI profile?