Include osrelease check in selinux case statement

diff --git a/manifests/linux/redhat.pp b/manifests/linux/redhat.pp
index 54b591c561b98de960cb1a81914fd53805c71125..9e5ad18e25fa1a03941a6136909d1c1c3ca00441 100644 (file)
--- a/manifests/linux/redhat.pp
+++ b/manifests/linux/redhat.pp
@@ -61,7 +61,12 @@ class firewall::linux::redhat (
   # Redhat 7 selinux user context for /etc/sysconfig/iptables is set to unconfined_u
   case $::selinux {
     #lint:ignore:quoted_booleans
-    'true',true: { $seluser = 'unconfined_u' }
+    'true',true: {
+      case $::operatingsystemrelease {
+        /^7.*/: { $seluser = 'unconfined_u' }
+        default: { $seluser = 'system_u' }
+      }
+    }
     #lint:endignore
     default:     { $seluser = undef }
   }