pam_faillock rules: show XCCDF variables in rule description

[vojtapolasek]

Description:

Modify following rules so that XCCDF variable which is used in their checks and remediations is displayed in the description:

• accounts_passwords_pam_faillock_deny
• accounts_passwords_pam_faillock_interval
• accounts_passwords_pam_faillock_dir
• accounts_passwords_pam_faillock_unlock_time

Rationale:

It improves customer experience. Previously, when reading the guide, an administrator could not find out what configuration value is actually correct.

Review Hints:

1. ./build_product rhel7 rhel8 rhel9
2. review HTML guides and verify that the appropriate variable is shown in the description section. I recommend reviewing the STIG guide.

[github-actions]

Start a new ephemeral environment with changes proposed in this pull request:

Fedora Environment

Oracle Linux 8 Environment

[codeclimate]

Code Climate has analyzed commit ccafa26 and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 53.5% (0.0% change).

View more on Code Climate.

[marcusburghardt]

The information is clear and accurate according to the variable values in the profile. I only noticed the RHEL9 is using deprecated versions of faillock rules. But this doesn't need to be updated in this PR.