firewall and selinux management with puppet