From 6e82b647d4d8b03eb7f31526c44e15c9338f1876 Mon Sep 17 00:00:00 2001
From: Major Hayden <major@mhtx.net>
Date: Mon, 11 Sep 2017 16:14:25 -0600
Subject: [PATCH] Cast security_shadow_utils_fail_delay as int

This patch ensures that security_shadow_utils_fail_delay is an
integer before we perform math on it.

Change-Id: I2b586c9d96447c6747aea3be53c6f622cd494f75
(cherry picked from commit e683bce9155f5fd40ccd2e68ac55d834d98c49df)
---
 tasks/rhel7stig/auth.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tasks/rhel7stig/auth.yml b/tasks/rhel7stig/auth.yml
index aae8e745..7865070f 100644
--- a/tasks/rhel7stig/auth.yml
+++ b/tasks/rhel7stig/auth.yml
@@ -97,7 +97,7 @@
   lineinfile:
     dest: /etc/pam.d/login
     regexp: '^(auth[\s]+optional[\s]+pam_faildelay.so).*$'
-    line: '\1 delay={{ security_shadow_utils_fail_delay * 10**6 }}'
+    line: '\1 delay={{ (security_shadow_utils_fail_delay | int) * 10**6 }}'
     state: present
     backrefs: yes
   when: