From 85afda6413165220eb719b9128ad663ab00a34c2 Mon Sep 17 00:00:00 2001
From: Adam Lewandowski <adam.lewandowski@plxis.com>
Date: Thu, 5 May 2022 10:28:41 -0400
Subject: [PATCH] Add missing variable defaults for 'rhel9cis_pam_faillock'

Signed-off-by: Adam Lewandowski <adam.lewandowski@plxis.com>
---
 defaults/main.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/defaults/main.yml b/defaults/main.yml
index b5315a9..248b492 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -582,6 +582,9 @@ rhel9cis_pam_password:
     minclass: 4
 
 rhel9cis_pam_faillock:
+    attempts: 5
+    unlock_time: 900
+    fail_for_root: no
     remember: 5
 
 # UID settings for interactive users