# profiles::selinux::setenforce class profiles::selinux::setenforce ( Enum['enforcing', 'permissive', 'disabled'] $mode = 'enforcing', ) { class { 'selinux': mode => $mode, require => Package['policycoreutils'] } }