# profiles::selinux::setenforce class profiles::selinux::setenforce ( Enum['enforcing', 'permissive', 'disabled'] $mode = 'enforcing', ) { class { 'selinux': mode => $mode, } }