Expanded test coverage

spec/acceptance/00_pam_spec.rb

@@ -21,6 +21,16 @@
       it { should be_installed }
     end
 
+    describe file('/etc/pam.d/login') do
+      it { should be_file }
+      it { should be_owned_by 'root' }
+      it { should be_grouped_into 'root' }
+      it { should be_mode 644 }
+      if fact('osfamily') == 'RedHat'
+        its(:content) { should match /^account\s+required\s+pam_access.so$/ }
+      end
+    end
+
     describe file('/etc/pam.d/sshd') do
       it { should be_file }
       it { should be_owned_by 'root' }
@@ -45,6 +55,32 @@
       it { should be_mode 640 }
       its(:content) { should match /^$|^#/ }
     end
+
+    if fact('osfamily') == 'RedHat'
+      ['password-auth','system-auth'].each do |f|
+        describe file("/etc/pam.d/#{f}-ac") do
+          it { should be_file }
+          it { should be_owned_by 'root' }
+          it { should be_grouped_into 'root' }
+          it { should be_mode 644 }
+        end
+        describe file("/etc/pam.d/#{f}") do
+          it { should be_symlink }
+          it { should be_linked_to "/etc/pam.d/#{f}-ac" }
+        end
+      end
+    end
+
+    if fact('osfamily') == 'Debian'
+      ['auth', 'account', 'password', 'session', 'session-noninteractive' ].each do |f|
+        describe file("/etc/pam.d/common-#{f}") do
+          it { should be_file }
+          it { should be_owned_by 'root' }
+          it { should be_grouped_into 'root' }
+          it { should be_mode 644 }
+        end
+      end
+    end
   end
 end