# platform = Red Hat Enterprise Linux 7, multi_platform_fedora
- (xccdf-var var_password_pam_%VARIABLE%)

- name: Ensure PAM variable %VARIABLE% is set accordingly
  lineinfile:
    create=yes
    dest="/etc/security/pwquality.conf"
    regexp="^%VARIABLE%"
    line="%VARIABLE% = {{ var_password_pam_%VARIABLE% }}"
  tags:
    @ANSIBLE_TAGS@

