Fix exec to set the mode

I wasnt, but that would work too: onlyif systems current mode is permissive.
On Jul 19, 2014 12:55 PM, "Garrett Honeycutt" <notifications@github.com>
wrote:

> In manifests/init.pp:
>
> > +  # selinux allows you to set the system to permissive or enforcing while
> > +  # disabling completely requires a reboot. We set to permissive here when the
> > +  # desired level is disabled, since it has the similar effect of ignoring
> > +  # selinux and we do not have to force a reboot.
> > +  case $mode {
> > +    'permissive','disabled': {
> > +      exec { 'set_permissive_mode':
> > +        command => 'setenforce Permissive',
> > +        unless  => 'getenforce | grep -ie permissive -e disabled',
> > +        path    => '/bin:/usr/bin:/sbin:/usr/sbin',
> > +      }
> > +    }
> > +    'enforcing': {
> > +      exec { 'set_enforcing_mode':
> > +        command => 'setenforce Enforcing',
> > +        unless  => 'getenforce | grep -i enforcing',
>
> are you saying that the unless should be an onlyif?
>
> —
> Reply to this email directly or view it on GitHub
> <https://github.com/ghoneycutt/puppet-module-selinux/pull/22/files#r15141758>
> .
>