Assert that: rhel8cis_crypto_policy in rhel8cis_allowed_crypto_policies does not allow policy modules

[bbaassssiiee]

Describe the Issue

1. Active Directory integration could use AD-SUPPORT module for crypto-policies [1].
2. Common Criteria require the OSPP module for crypto-policies.

Expected Behavior
I'd expect a split on : of the rhel8cis_crypto_policy with a check on the first part.
Now I have to extend rhel8cis_allowed_crypto_policies.

Actual Behavior

rhel8cis_crypto_policy: DEFAULT:AD-SUPPORT fails the asserion Check crypto-policy input

Control(s) Affected

Not reported correctly, run breaks.

Environment (please complete the following information):

• Ansible Version: [e.g. 2.10]
• Host Python Version: [e.g. Python 3.7.6]
• Ansible Server Python Version: [e.g. Python 3.7.6]
• Using branch: [e.g. main]
• Additional Details:

Additional Notes

• https://access.redhat.com/solutions/5728591
• https://access.redhat.com/solutions/6989984

Possible Solution

Check the policy and possible module.
Add allowed modules as a dict and implement a check on it.

rhel8cis_allowed_crypto_policies_modules:
  - OSPP

[1] Enabling AD-SUPPORT might create a workaround, while the AD should be updated instead:
https://www.redhat.com/en/blog/red-hat-enterprise-linux-and-microsoft-security-update-november-2022

[bbaassssiiee]

verified #297