Add Amazon Linux 2023 DISA STIG Profile

Dockerfiles/test_suite-al2023

@@ -0,0 +1,25 @@
+# This Dockerfile is a minimal example for a RHEL-based SSG test suite target container.
+FROM amazonlinux:2023
+
+ENV AUTH_KEYS=/root/.ssh/authorized_keys
+
+ARG CLIENT_PUBLIC_KEY
+ARG ADDITIONAL_PACKAGES
+
+# Install Python so Ansible remediations can work
+# Don't clean all, as the test scenario may require package install.
+RUN true \
+        && dnf install -y openssh-clients openssh-server openscap-scanner \
+		python \
+		$ADDITIONAL_PACKAGES \
+        && true
+
+RUN true \
+        && for key_type in rsa ecdsa; do ssh-keygen -N '' -t $key_type -f /etc/ssh/ssh_host_${key_type}_key; done \
+        && mkdir -p /root/.ssh \
+        && printf "%s\n" "$CLIENT_PUBLIC_KEY" >> "$AUTH_KEYS" \
+        && chmod og-rw /root/.ssh "$AUTH_KEYS" \
+        && sed -i '/session\s\+required\s\+pam_loginuid.so/d' /etc/pam.d/sshd \
+&& true
+
+RUN echo 'PermitRootLogin yes' >> /etc/ssh/sshd_config