xoxys.pam/molecule/centos7/tests/test_default.py

import os

import testinfra.utils.ansible_runner

testinfra_hosts = testinfra.utils.ansible_runner.AnsibleRunner(
    os.environ["MOLECULE_INVENTORY_FILE"]
).get_hosts("all")


def test_pam_config(host):
    auth = host.file("/etc/pam.d/system-auth")

    assert auth.contains("auth        sufficient    pam_unix.so nullok try_first_pass")
    assert auth.contains(
        "password    sufficient    pam_unix.so sha512 shadow nullok try_first_pass use_authtok"
    )