The pam faillock parameters are not being correctly implemented

[michael-riddle]

The file resource controlled by pam::faillock_log_dir is creating a broken symlink called dir instead of making the directory and the supporting configuration in /etc/security/faillock.conf is missing.

The module does not currently control any aspect of /etc/security/faillock.conf so implementing this correctly will be more involved than just using a file_line resource. If we're going to control this parameter we should really make a template that is fully configurable instead of picking and choosing the faillock parameters we control.