Small bug in task 5.2.4.5 "Ensure audit configuration files are 640 or more restrictive"

[DianaMariaDDM]

Describe the Issue
If the auditd_conf_files register used in this task is empty or undefined then the task would fail.
Expected Behavior
The task should not fail even if the register is empty.

Actual Behavior
The task fails because of the order of execution in ansible fields. The first when conditional
when: - item.mode != '06(0|4)0'

is the one responsible for this, along with the loop: used in the task : loop: "{{ auditd_conf_files.files }}".

If one combines a when statement with a loop, Ansible processes the condition separately for each item. This is by design, so you can execute the task on some items in the loop and skip it on other items.

The documentation for Ansible provides a solution:

Control(s) Affected

• Control 5.2.4.5

Environment (please complete the following information):

• branch being used: [e.g. devel]

Additional Notes
Anything additional goes here

Possible Solution
The fix will be provided in a PR.