Move test plugins into security role

The greaterthan/lessthan test plugins were added into
openstack-ansible-plugins a month ago, but they are needed in the
security role to ensure that the role can run on a system without
openstack-ansible-plugins installed.

The test plugins in this role should be removed once jinja 2.9.5 is
available for use in OpenStack (likely after Ocata release).

Closes-bug: 1660060
Change-Id: Ic86dc9a9e8ae8d03fe52a7c3fc52e580b9936711

tasks/rhel7stig/file_perms.yml

@@ -107,7 +107,7 @@
   when:
     - item.uid >= 1000
     - security_set_home_directory_permissions_and_owners | bool
-  with_items: "{{ user_list.users | selectattr('uid', 'greater_than', 999) | list }}"
+  with_items: "{{ user_list.users | selectattr('uid', 'greaterthan', 999) | list }}"
   tags:
     - medium
     - file_perms

test_plugins/custom_tests.py

@@ -0,0 +1,39 @@
+#!/usr/bin/env python
+# Copyright 2016, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""Extra tests for jinja2 templates in Ansible."""
+
+# NOTE(mhayden): Remove this file when jinja 2.9.5 is available for use within
+# OpenStack.
+
+
+def greaterthan(value, reference_value):
+    """Return true if value > reference_value."""
+    return value > reference_value
+
+
+def lessthan(value, reference_value):
+    """Return true if value < reference_value."""
+    return value < reference_value
+
+
+class TestModule:
+    """Main test class from Ansible."""
+
+    def tests(self):
+        """Add these tests to the list of tests available to Ansible."""
+        return {
+            'greaterthan': greaterthan,
+            'lessthan': lessthan,
+        }