Misc fixes for RHEL7 PAM, plus bash remediations

- Patch introduces bash remediations for the various PAM rules
- Bugfix to the difok OVAL (should be >=, not <=)
- updated XCCDF variables for reuse between RHEL6/RHEL7