pam module does not support unlock_time=never

Description

pam_faillock allows unlock_time to be set to 'never' and the DISA STIG actually checks for this setting to be never.

https://bugzilla.redhat.com/show_bug.cgi?id=1273373
https://github.com/OpenSCAP/scap-security-guide/pull/1583

With SIMP there is currently no way to set this value to 'never' since the Type is set to Integer for the value in the PAM class.

Acceptance Criteria

None

Labels

None

Epic Link

None

Story Points

None

Components

Assignee

Adam Yohrling

Affects versions

Priority

Medium
Configure