Add faillock config

nilrt_snac/_configs/__init__.py

@@ -3,6 +3,7 @@
 from nilrt_snac._configs._base_config import _BaseConfig
 from nilrt_snac._configs._console_config import _ConsoleConfig
 from nilrt_snac._configs._cryptsetup_config import _CryptsetupConfig
+from nilrt_snac._configs._faillock_config import _FaillockConfig
 from nilrt_snac._configs._niauth_config import _NiauthConfig
 from nilrt_snac._configs._ntp_config import _NtpConfig
 from nilrt_snac._configs._opkg_config import _OpkgConfig
@@ -21,6 +22,7 @@
     _CryptsetupConfig(),
     _NiauthConfig(),
     _WifiConfig(),
+    _FaillockConfig(),
     _X11Config(),
     _ConsoleConfig(),
     _PWQualityConfig(),

nilrt_snac/_configs/_faillock_config.py

@@ -0,0 +1,23 @@
+import argparse
+
+from nilrt_snac._configs._base_config import _BaseConfig
+
+from nilrt_snac import logger
+from nilrt_snac.OpkgHelper import opkg_helper
+
+
+class _FaillockConfig(_BaseConfig):
+    def __init__(self):
+        self._opkg_helper = opkg_helper
+
+    def configure(self, args: argparse.Namespace) -> None:
+        print("Configuring PAM faillock...")
+        self._opkg_helper.install("pam-plugin-faillock")
+
+    def verify(self, args: argparse.Namespace) -> bool:
+        print("Verifying PAM faillock...")
+        valid = True
+        if not self._opkg_helper.is_installed("pam-plugin-faillock"):
+            valid = False
+            logger.error("MISSING: pam-plugin-faillock not installed")
+        return valid