TESTING ONLY: unselect the 3 remaining CIS-diff rules from RHEL9 cui

Temporarily unselects file_owner_at_allow, file_ownership_home_directories,
and group_unique_name from the RHEL 9 cui profile, making it byte-for-byte
identical to cis (468/468 selections match). This is purely to eliminate
the last remaining content difference for the RHEL-9-x86_64 scp
stabilization investigation.

None of the 3 rules plausibly affect SSH: group_unique_name has no
automated remediation at all, file_owner_at_allow only chowns
/etc/at.allow, and file_ownership_home_directories explicitly excludes
UID 0 (root, the account contest connects as) via its uid_min check. This
commit is expected to be reverted once the investigation concludes; do
not merge into master.

Author: ggbecker

products/rhel9/profiles/cui.profile

@@ -46,3 +46,11 @@ selections:
     # match the variable defaults, pinned here for clarity/robustness)
     - var_selinux_state=enforcing
     - var_selinux_policy_name=targeted
+
+    # TESTING ONLY - temporarily unselect the 3 rules that are the only
+    # remaining content difference vs cis, to get byte-for-byte parity
+    # for the scp/RHEL-9-x86_64 stabilization investigation. Revert
+    # before merging.
+    - '!file_owner_at_allow'
+    - '!file_ownership_home_directories'
+    - '!group_unique_name'

tests/data/profile_stability/rhel9/cui.profile

@@ -173,7 +173,6 @@ file_groupownership_audit_binaries
 file_groupownership_audit_configuration
 file_groupownership_sshd_private_key
 file_groupownership_sshd_pub_key
-file_owner_at_allow
 file_owner_backup_etc_group
 file_owner_backup_etc_gshadow
 file_owner_backup_etc_passwd
@@ -198,7 +197,6 @@ file_owner_sshd_config
 file_owner_user_cfg
 file_ownership_audit_binaries
 file_ownership_audit_configuration
-file_ownership_home_directories
 file_ownership_sshd_private_key
 file_ownership_sshd_pub_key
 file_ownership_var_log_audit_stig
@@ -239,7 +237,6 @@ firewalld_loopback_traffic_trusted
 gid_passwd_group_same
 gnome_gdm_disable_xdmcp
 group_unique_id
-group_unique_name
 groups_no_zero_gid_except_root
 grub2_audit_argument
 grub2_audit_backlog_limit_argument