Improve pam_options SLE16 -related behaviour

[teacup-on-rockingchair]

Description:

• Improve pam_options related rules behaviour for SLE16. Make sure distro default configuration files from /usr/etc are not used in hardening for anything else but for source of generating default configuration in /etc from remediation scripts. Anything in /usr/etc will be changed or wiped out on upgrade so we should not rely on it for hardening

Rationale:

• Remove the special case for sle16 in OVAL, if file is missing test will FAIL
• Add preserve option when copy distro defaults to /etc for bash and ansible
• Fix tests for use_pam_wheel_group_for_su and set_password_hashing_algorithm_commonauth
• Add test for accounts_password_pam_pwhistory_remember

[openshift-ci]

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

[jan-cerny]

@teacup-on-rockingchair Please remove the file shared/macros/.fuse_hidden00017cc400000050 from the PR.

[teacup-on-rockingchair]

@teacup-on-rockingchair Please remove the file shared/macros/.fuse_hidden00017cc400000050 from the PR.

Thanks 🙇 , just rebased it to drop that file from history

[jan-cerny]

The fail is rule rsyslog_files_permissions isn't caused by the contents of this PR and is currently being solved in #14715.