BUG: SV-238329 malformed describe.one

[pbarrette]

The control tries to check for lock either via the /etc/shadow file or using the passwd -S root command.

The InSpec code suggests describe.one but ends after then shadow file check, then parses the passwd -S command as though they were separate checks.

A correction might read:

  describe.one do
    describe shadow.where(user: 'root') do
      its('passwords.uniq.first') { should eq '!*' }
    end
    describe command('passwd -S root').stdout.strip do
      it { should match(/^root\s+L\s+.*$/) }
    end
  end