Make Ansible in accounts_passwords_pam_faillock_dir idempotent

[jan-cerny]

Change the SELinux context of /var/log/faillock only if the current context isn't correct.

Resolves: https://issues.redhat.com/browse/OPENSCAP-6240

Review Hints:

• ./build_product --playbook-per-rule rhel9
• manually replace hosts by hosts: all in build/rhel9/playbooks/stig/accounts_passwords_pam_faillock_dir.yml
• Connect by ssh to your VM and ensure an authselect profile is selected before running any Ansible Playbook.
• run ansible-playbook -u root -i YOUR_IP, build/rhel9/playbooks/stig/accounts_passwords_pam_faillock_dir.yml at least twice and compare the output of the first run with the second run and so on, verify that the second and next runs don't change anything and that the output contains only "ok" or "skipping"
• apart from that, run automatus Tss with --remediate-using ansible

[openshift-ci]

@jan-cerny: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/e2e-aws-openshift-platform-compliance	9c1c0a0	link	true	/test e2e-aws-openshift-platform-compliance
ci/prow/e2e-aws-openshift-node-compliance	9c1c0a0	link	true	/test e2e-aws-openshift-node-compliance

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[jan-cerny]

/packit build

[Mab879]

Automatus passes locally.