Set timeout interval for SSH sessions
Check integript of rpm package files, reinstall if any changes are found
RPM intergrity checking

Add single task to prelim.yml that runs rpm -Va and stores output in /tmp. Running this command takes some time and the output is needed for several other tasks.
Set most prelim tasks to always run.
Add post.yml to cleanup temp files (currently only one).
Check and set group ownership of files
Stop and disable rdisc service
Set umask to 077 for bash
Require client signing for SMB

Add handler to restart smb
Add autofs to list of configured services
Check /dev/ for unlabeled_t context and correct
Add another finding ID to task that copies audit.rules

Add summary description to task that fixes multiple findings by copying a template file.
Add finding ID to task that enabled gpgcheck on yum repos

Finding V-38487 is a duplicate of V-38483. Gotta love the STIGs.
Notify user seven days before password expires
Log Martian packets
Add postfix to list of services

Postfix must be enabled to be STIG compliant.
Remove all_squash from /etc/exports

Add handler to restart nfs.
Add placeholders for STIG findings I'm not sure how to handle at this point. Mainly checking for use of encryption and using separating filesystems for /var/log and /var/log/audit.