Added all CIS Section 8 Level 1 & 2 tasks & various fixes

https://benchmarks.cisecurity.org/tools2/ubuntu/CIS_Ubuntu_12.04_LTS_Server_Benchmark_v1.0.0.pdf
You are confusing the audit step with the remediation.  Only the addition of the audit=1 to the GRUB_CMDLINE_LINUX is required to remediate this.  The regex finds that line, and captures it ONLY if the line doesn't contain audit=1.  The lineinfile then takes the capture (if a capture occurred) and spits it back out ( the \1 anchor) with a space and audit=1 added onto the capture.  If no capture occurred the replacement never occurs (which would only occur if audit=1 is already contained in the GRUB_CMDLINE_LINUX line)