Fix SLE15 pam tally2 rules

linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/accounts_passwords_pam_tally2/rule.yml

@@ -71,4 +71,8 @@ ocil: |-
 
     If the account option is missing, or commented out, this is a finding.
 
+{{% if product == "sle15" %}}
+platform: os_linux[sles]<15.7 and package[pam]
+{{% else %}}
 platform: package[pam]
+{{% endif %}}

linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/accounts_passwords_pam_tally2_deny_root/rule.yml

@@ -53,7 +53,11 @@ fixtext: |-
     <pre>account required pam_tally2.so</pre></li>
     </ul>
 
+{{% if product == "sle15" %}}
+platform: os_linux[sles]<15.7 and package[pam]
+{{% else %}}
 platform: package[pam]
+{{% endif %}}
 
 srg_requirement: |-
     {{{ full_name }}} must automatically lock the root account until the root account is released by an administrator when three unsuccessful logon attempts occur during a 15-minute time period.

linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/accounts_passwords_pam_tally2_unlock_time/rule.yml

@@ -46,7 +46,11 @@ fixtext: |-
     Modify the content of both <tt>/etc/pam.d/login</tt>, like this:
     <pre>auth required pam_tally2.so deny={{{ xccdf_value("var_accounts_passwords_pam_tally2_deny") }}} <tt>unlock_time={{{ xccdf_value("var_accounts_passwords_pam_tally2_unlock_time") }}}</tt> </pre>
 
+{{% if product == "sle15" %}}
+platform: os_linux[sles]<15.7 and package[pam]
+{{% else %}}
 platform: package[pam]
+{{% endif %}}
 
 srg_requirement: |-
         {{{ full_name }}} must automatically lock an account until the locked account is released by an administrator.

shared/applicability/os_linux.yml

@@ -16,3 +16,7 @@ args:
         os_name: "Oracle Linux"
         os_id: 'ol'
         os_id_ansible: "OracleLinux"
+    sles:
+        os_name: "SUSE Linux Enterprise Server"
+        os_id: 'sles'
+        os_id_ansible: "SLES"