Temporary workaround for SELinux on RHEL7

For @adelton et al.
should this not be in the setup() block at the top with the other firewall/puppet/packages stuff?