update shared.sh

[Mixer9]

Removed cut function and returned the last field with awk, this provides better listing since not all values returned will have the same fields. It also removes whitespace at the beginning of the values returned. see comparison below:

[root@soctxadm01:~]# rpm -Va --nofiledigest | grep '^.M' | cut -d ' ' -f4-
/etc/selinux/targeted/active/seusers
 /etc/selinux/targeted/active/users_extra
/var/lib/rpm/__db.001
/var/lib/rpm/__db.002
/var/lib/rpm/__db.003
 /opt/splunkforwarder/etc/auth
/var/lib/systemd/random-seed
 /etc/insights-client/.exp.sed
 /etc/insights-client/.fallback.json
 /etc/insights-client/.fallback.json.asc
 /etc/insights-client/cert-api.access.redhat.com.pem
/etc/insights-client/insights-client.conf
 /etc/insights-client/redhattools.pub.gpg
 /etc/insights-client/rpm.egg
 /etc/insights-client/rpm.egg.asc
/var/lock/iscsi
/var/lock/iscsi/lock
/run/lsm
/run/lsm/ipc
/var/log/dmesg
[root@soctxadm01:~]# rpm -Va --nofiledigest | grep '^.M' | awk '{print $NF}'
/etc/selinux/targeted/active/seusers
/etc/selinux/targeted/active/users_extra
/var/lib/rpm/__db.001
/var/lib/rpm/__db.002
/var/lib/rpm/__db.003
/opt/splunkforwarder/etc/auth
/var/lib/systemd/random-seed
/etc/insights-client/.exp.sed
/etc/insights-client/.fallback.json
/etc/insights-client/.fallback.json.asc
/etc/insights-client/cert-api.access.redhat.com.pem
/etc/insights-client/insights-client.conf
/etc/insights-client/redhattools.pub.gpg
/etc/insights-client/rpm.egg
/etc/insights-client/rpm.egg.asc
/var/lock/iscsi
/var/lock/iscsi/lock
/run/lsm
/run/lsm/ipc
/var/log/dmesg

Description:

Change rpm command to get list of files that permissions changed on.

Rationale:

The original method returns empty fields from values who have less fields.

[openscap-ci]

Can one of the admins verify this patch?

[scrutinizer-notifier]

The inspection completed: No new issues

[cipherboy]

@openscap-ci test this please.

[jan-cerny]

@Mixer9 This is great.

But I noticed that it is different form the code in Ansible in #3328. I know it was there before, but I think it should be the same. My opinion is that --nofiledigest should be added to the Ansible code as well. We don't need to verify digests in this rule and it will speed up a little bit (on my machine from 46 seconds to 20 seconds).