Reapply "Properly waive /hardening/.+/rpm_verify_(ownership|permissions)" (#437)

This reverts commit 398a368.

We can now reapply this reverted commit as updated `lib/versions.py`
should handle minor version comparison also on CentOS Stream.

Author: matusmarhefka

conf/waivers/productization

@@ -120,11 +120,11 @@
 /hardening/kickstart(/with-gui|/uefi)?/(hipaa|stig|stig_gui)/service_kdump_disabled
     rhel == 10
 
-# caused by one of:
-# - bz1778661 (abrt)
-# - bz2209266 (RHEL-9 gdm)
+# /run/fapolicyd file mode and groupownership differes from RPM database
+# RHEL 9: https://issues.redhat.com/browse/RHEL-59626
+# RHEL 10: https://issues.redhat.com/browse/RHEL-94536
 /hardening/.+/rpm_verify_(ownership|permissions)
-    True
+    (rhel == 9 and rhel <= 9.6) or rhel == 10.0
 
 # RHEL-8: https://bugzilla.redhat.com/show_bug.cgi?id=1834716
 # RHEL-9: https://bugzilla.redhat.com/show_bug.cgi?id=1999587