{{% set default_dir = "/var/run/faillock" %}} {{{ oval_metadata(" Persist lockout account after reboot") }}} dir\s*=\s*(\S+|"[^"]+) ^[\s]*auth[\s]+(?:required|requisite) [\s]+pam_faillock.so[^\n#]* ^[\s]* {{{ default_dir }}} /etc/pam.d/system-auth 1 state_pam_faillock_dir_parameter_not_default_value /etc/pam.d/password-auth 1 state_pam_faillock_dir_parameter_not_default_value /etc/pam.d/system-auth 1 2 var_faillock_dir_set_both_preauth_authfail_system_auth 2 var_faillock_dir_set_both_preauth_authfail_password_auth /etc/security/faillock.conf 1