Configure NTP

Copy NTP template using default time servers
Add variables for restrict settings and ntp servers
Better formatting of multiple finding tasks

Reformatted single tasks that correct multiple finding IDs so that their printed output is more readable when using --list-tasks and when run. This makes the actual task name a bit less readable but the user experience is better.
Start and enable ntp
Set mode of system log files to 0600

Add task to get list of log files from /etc/rsyslog.conf
Use output of this task to set owner, group, and mode on system log files
LDAPS

Configure LDAP to use TLS and verify against a CA directory
Set screensaver idle timeout to 15 minutes
Enable auditd

Start and enable auditd
Remove extraneous test tags
Add finding ID tag to Check LDAP task
Disable interactive boot
Add finding IDs to aide cron task
Use TCP syncookies
Configure firweall to drop all INPUT by default
Add finding ID to task that enables iptables
Enable automatic screen lock
Add finding ID to auditd.conf template task
Check integrity of audit files

Add task to check integrity and another task to reinstall the audit package if any hashes are different. I did the reinstall using command since a force reinstall is not currenty possible using the yum module.
Improve failure checking for AV related tasks

Remove ignore_errors in favor of redifing an accurate failure. This should eliminate errors instead of ignoring them.
Add an addition prompt if no AV definitions are found versus finding outdated definitions.
Change name on task that searches for world writable files
Remove ignore_errors because it was not needed.

Change prompt output to be more accurate.
Replace ignor_errors with failed_when for task that looks for nfs mounts
Better failure checking when checking for updates

Exit code 1 from yum is an actual failure, exit code 100 means updates are available.
Print list of available updates if any are found.