The `systemctl status` commands now return a code of `4` instead of `3`
when the systemd unit isn't found. This patch adds checks for those.
A packaging bug[0] causes `yum-cron` installations to fail. The
unattended upgrade tasks are now skipped for CentOS 7 until a better
workaround can be found.
The auditd daemon now resets file permissions on its log directory each
time it restarts and that breaks the idempotence tests. That task now
has "changed_when: False".
These patches should unblock the security role gate.
[0] https://bugzilla.redhat.com/show_bug.cgi?id=1293713
Change-Id: I80b66a6d9e7c8ad97761a1f890ec6a3d2db88659
71a3847862