auth-system related files are created for non-RHEL systems (e.g. Debian)

[fernandezcuesta]

Expected behavior
/etc/pam.d/system-auth-ac should not be created for other than RHEL OS families.

Actual behavior
/etc/pam.d/system-auth-ac is generated regardless of OS family.

$ uname -a; ls /etc/pam.d/system-auth-ac
Linux vm01 4.9.0-11-amd64 #1 SMP Debian 4.9.189-3+deb9u1 (2019-09-20) x86_64 GNU/Linux
/etc/pam.d/system-auth-ac

Example Playbook

---
- hosts: all
  become: yes
  become_method: sudo
  tasks:
    - include_role:
        name: dev-sec.os-hardening

Ansible Version

ansible 2.9.0
  config file = /data/sandbox/ansible.cfg
  configured module search path = ['/home/fernandezjm/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
  ansible python module location = /usr/lib/python3.7/site-packages/ansible
  executable location = /usr/bin/ansible
  python version = 3.7.4 (default, Jul 16 2019, 07:12:58) [GCC 9.1.0]

Role Version

5.2.1

Additional context
Seems like task configure passwdqc and tally via central system-auth confic from pam.yml is missing the following condition:

when: ansible_facts.os_family == 'RedHat'

[rndmh3ro]

You're totally right @fernandezcuesta, thanks for finding this. Additionally /etc/libuser.conf (the next task) should also only be create on rhel-systems. Do you want to create a PR for this?