Added assertion to check sugroup exists

Signed-off-by: Mark Bolwell <[email protected]>

tasks/main.yml

@@ -25,6 +25,26 @@
   - rhel7cis_set_boot_pass
   - rhel7cis_rule_1_5_1
 
+- name: "check sugroup exists if used"
+  block:
+  - name: "Check su group exists if defined"
+    command: grep -w "{{ rhel7cis_sugroup }}" /etc/group
+    register: sugroup_exists
+    changed_when: false
+    failed_when: sugroup_exists.rc >= 2
+    tags:
+    - skip_ansible_lint
+
+  - name: Check sugroup if defined exists before continuing
+    assert:
+      that: sugroup_exists.rc == '0'
+      msg: "The variable rhel7cis_sugroup is defined but does not exist please rectify" 
+  when:
+  - rhel7cis_sugroup is defined
+  - rhel7cis_rule_5_6
+  tags:
+  - rule_5.6
+
 - include: check_prereqs.yml
   tags:
   - always