Could this be done with the file resource instead of an exec? File can be used to create symlinks too. I think that would mean knowing the actual name of the binary rather than using the wildcard, but in my view that's probably a good thing (explicit over implicit and all that).