From 41fb626e1477de3368ca4db30ac32c5e380f5bd2 Mon Sep 17 00:00:00 2001
From: cdenneen <cdenneen@gmail.com>
Date: Wed, 7 Oct 2015 09:29:26 -0400
Subject: [PATCH] Include osrelease check in selinux case statement

---
 manifests/linux/redhat.pp | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/manifests/linux/redhat.pp b/manifests/linux/redhat.pp
index 54b591c..9e5ad18 100644
--- a/manifests/linux/redhat.pp
+++ b/manifests/linux/redhat.pp
@@ -61,7 +61,12 @@ class firewall::linux::redhat (
   # Redhat 7 selinux user context for /etc/sysconfig/iptables is set to unconfined_u
   case $::selinux {
     #lint:ignore:quoted_booleans
-    'true',true: { $seluser = 'unconfined_u' }
+    'true',true: {
+      case $::operatingsystemrelease {
+        /^7.*/: { $seluser = 'unconfined_u' }
+        default: { $seluser = 'system_u' }
+      }
+    }
     #lint:endignore
     default:     { $seluser = undef }
   }
-- 
2.45.2