Initial ansible onboard

ansible/roles/cis_hardening/templates/etc/pam.d/common-auth.j2

@@ -0,0 +1,14 @@
+# {{ ansible_managed }}
+
+{% if faillock.matched >= 1 %}
+auth required pam_faillock.so preauth
+auth [success=1 default=ignore] pam_unix.so
+auth [default=die] pam_faillock.so authfail
+auth sufficient pam_faillock.so authsucc
+{% else %}
+auth [success=1 default=ignore] pam_unix.so
+auth required pam_tally2.so onerr=fail audit silent deny=3 unlock_time=900
+{% endif %}
+auth requisite pam_deny.so
+auth required pam_permit.so
+auth optional pam_cap.so