Enable verbose logginf for vsftpd
Add to audit.rules
Prevent root from logging in via serial consoles
Disable netconsole
Remove X11 if not required
Disable core dumps
Set keyboard shortcut for locking graphical sessions
Send auditd logs to syslog
Audit account changes
Disable rhnsd
More audit rules
Require one digit in passwords

Create variable for pam_cracklib settings.
Describe new variable in README.
Rename variable to be less ambiguous.
Verify ownership of all installed package files

Change task that checks all rpms from two steps to one. No need to remove an existing file, just use output redirection and it overwrites any existing files.
Correct awk command to print $2 instead of $3, which printed nothing.