Fix rule 1.6.1 idempotence;

[ShawnHardwick]

Overall Review of Changes:

• Fix idempotency of rule 1.6.1
• Modify behavior of changed_when if reboot is pending and skipped to allow idempotency to succeed

Changing the behavior of changed_when for the final reboot warning allows for users who are checking for changed tasks in their idempotency checks to filter this one out.

Issue Fixes:
N/A

Enhancements:
N/A

How has this been tested?:
When the remote host is configured as:

[mol-admin@d-mol-rysts-1 ~]$ update-crypto-policies --show
DEFAULT:NO-SHA1:NO-SSHCBC:NO-WEAKMAC

Rule 1.6.1 (and subsequent rules) no longer have changed tasks:

TASK [RHEL8-CIS : 1.6.1 | PATCH | Ensure system-wide crypto policy is not legacy | set_fact] ***

ok: [rhel-8] => changed=false 
  ansible_facts:
    rhel8cis_full_crypto_policy: DEFAULT

TASK [RHEL8-CIS : 1.6.1 | PATCH | Ensure system-wide crypto policy is not legacy] ***

skipping: [rhel-8] => changed=false 
  false_condition: rhel8cis_full_crypto_policy not in discovered_system_wide_crypto_policy.stdout
  skip_reason: Conditional result was False

TASK [RHEL8-CIS : 1.6.2 | PATCH | Ensure system wide crypto policy disables sha1 hash and signature support | crypto_file] ***

skipping: [rhel-8] => changed=false 
  false_condition: '''NO-SHA1'' not in discovered_system_wide_crypto_policy.stdout'
  skip_reason: Conditional result was False

TASK [RHEL8-CIS : 1.6.2 | PATCH | Ensure system wide crypto policy disables sha1 hash and signature support | set crypto policy] ***

skipping: [rhel-8] => changed=false 
  false_condition: '''NO-SHA1'' not in discovered_system_wide_crypto_policy.stdout'
  skip_reason: Conditional result was False

TASK [RHEL8-CIS : 1.6.3 | PATCH | Ensure system wide crypto policy disables cbc for ssh | crypto_file] ***

skipping: [rhel-8] => changed=false 
  false_condition: '''NO-SSHCBC'' not in discovered_system_wide_crypto_policy.stdout'
  skip_reason: Conditional result was False

TASK [RHEL8-CIS : 1.6.3 | PATCH | Ensure system wide crypto policy disables cbc for ssh | set crypto policy] ***

skipping: [rhel-8] => changed=false 
  false_condition: '''NO-SSHCBC'' not in discovered_system_wide_crypto_policy.stdout'
  skip_reason: Conditional result was False

TASK [RHEL8-CIS : 1.6.4 | PATCH | Ensure system wide crypto policy disables cbc for ssh | crypto_file] ***

skipping: [rhel-8] => changed=false 
  false_condition: '''NO-WEAKMAC'' not in discovered_system_wide_crypto_policy.stdout'
  skip_reason: Conditional result was False

TASK [RHEL8-CIS : 1.6.4 | PATCH | Ensure system wide crypto policy disables cbc for ssh | set crypto policy] ***

skipping: [rhel-8] => changed=false 
  false_condition: '''NO-WEAKMAC'' not in discovered_system_wide_crypto_policy.stdout'
  skip_reason: Conditional result was False

Ansible version:

ansible [core 2.16.8.post0]

Target remote host:

NAME="Red Hat Enterprise Linux"
VERSION="8.10 (Ootpa)"

[uk-bolly]

Great change Thank you