updated yamllint, company naming, linting and spacing

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

tasks/section_5/cis_5.3.3.2.x.yml

@@ -1,8 +1,7 @@
 ---
 
 - name: "5.3.3.2.1 | PATCH | Ensure password number of changed characters is configured"
-  when:
-    - rhel9cis_rule_5_3_3_2_1
+  when: rhel9cis_rule_5_3_3_2_1
   tags:
     - level1-server
     - level1-workstation
@@ -30,7 +29,7 @@
         dest: "/{{ rhel9cis_passwd_difok_file }}"
         owner: root
         group: root
-        mode: '0600'
+        mode: 'go-rwx'
 
     - name: "5.3.3.2.1 | PATCH | Ensure password number of changed characters is configured | Remove difok from pam files Not AuthSelect"
       when:
@@ -58,8 +57,7 @@
       notify: Authselect update
 
 - name: "5.3.3.2.2 | PATCH | Ensure password length is configured"
-  when:
-    - rhel9cis_rule_5_3_3_2_2
+  when: rhel9cis_rule_5_3_3_2_2
   tags:
     - level1-server
     - level1-workstation
@@ -87,7 +85,7 @@
         dest: "/{{ rhel9cis_passwd_minlen_file }}"
         owner: root
         group: root
-        mode: '0600'
+        mode: 'go-rwx'
 
     - name: "5.3.3.2.2 | PATCH | Ensure minimum password length is configured | Remove minlen from pam files NOT AuthSelect"
       when:
@@ -115,8 +113,7 @@
       notify: Authselect update
 
 - name: "5.3.3.2.3 | PATCH | Ensure password complexity is configured"
-  when:
-    - rhel9cis_rule_5_3_3_2_3
+  when: rhel9cis_rule_5_3_3_2_3
   tags:
     - level1-server
     - level1-workstation
@@ -144,7 +141,7 @@
         dest: "/{{ rhel9cis_passwd_complex_file }}"
         owner: root
         group: root
-        mode: '0600'
+        mode: 'go-rwx'
 
     - name: "5.3.3.2.3 | PATCH | Ensure password complexity is configured | Remove complexity from pam files NOT AuthSelect"
       when:
@@ -172,8 +169,7 @@
       notify: Authselect update
 
 - name: "5.3.3.2.4 | PATCH | Ensure password same consecutive characters is configured"
-  when:
-    - rhel9cis_rule_5_3_3_2_4
+  when: rhel9cis_rule_5_3_3_2_4
   tags:
     - level1-server
     - level1-workstation
@@ -183,8 +179,7 @@
     - pam
   block:
     - name: "5.3.3.2.4 | PATCH | Ensure password same consecutive characters is configured | Remove maxrepeat settings from conf files except expected file"
-      when:
-        - item != rhel9cis_passwd_maxrepeat_file
+      when: item != rhel9cis_passwd_maxrepeat_file
       ansible.builtin.replace:
         path: "{{ item }}"
         regexp: 'maxrepeat\s*=\s*\d+\b'
@@ -200,7 +195,7 @@
         dest: "/{{ rhel9cis_passwd_maxrepeat_file }}"
         owner: root
         group: root
-        mode: '0600'
+        mode: 'go-rwx'
 
     - name: "5.3.3.2.4 | PATCH | Ensure password same consecutive characters is configured | Remove maxrepeat from pam files NOT AuthSelect"
       when:
@@ -228,8 +223,7 @@
       notify: Authselect update
 
 - name: "5.3.3.2.5 | PATCH | Ensure password maximum sequential characters is is configured"
-  when:
-    - rhel9cis_rule_5_3_3_2_5
+  when: rhel9cis_rule_5_3_3_2_5
   tags:
     - level1-server
     - level1-workstation
@@ -257,7 +251,7 @@
         dest: "/{{ rhel9cis_passwd_maxsequence_file }}"
         owner: root
         group: root
-        mode: '0600'
+        mode: 'go-rwx'
 
     - name: "5.3.3.2.5 | PATCH | Ensure password maximum sequential characters is configured | Remove maxsequence from pam files NOT AuthSelect"
       when:
@@ -285,8 +279,7 @@
       notify: Authselect update
 
 - name: "5.3.3.2.6 | PATCH | Ensure password dictionary check is enabled"
-  when:
-    - rhel9cis_rule_5_3_3_2_6
+  when: rhel9cis_rule_5_3_3_2_6
   tags:
     - level1-server
     - level1-workstation
@@ -313,7 +306,7 @@
         dest: "/{{ rhel9cis_passwd_dictcheck_file }}"
         owner: root
         group: root
-        mode: '0600'
+        mode: 'go-rwx'
 
     - name: "5.3.3.2.6 | PATCH | Ensure password dictionary check is enabled | Remove dictcheck from pam files NOT AuthSelect"
       when:
@@ -342,8 +335,7 @@
       notify: Authselect update
 
 - name: "5.3.3.2.7 | PATCH | Ensure password quality is enforced for the root user"
-  when:
-    - rhel9cis_rule_5_3_3_2_7
+  when: rhel9cis_rule_5_3_3_2_7
   tags:
     - level1-server
     - level1-workstation
@@ -356,4 +348,4 @@
     dest: "/{{ rhel9cis_passwd_quality_enforce_root_file }}"
     owner: root
     group: root
-    mode: '0600'
+    mode: 'o-rwx'