OP#706 extend exec to run only if found off

.vscode/settings.json

@@ -4,10 +4,12 @@
         "dontlognull",
         "dport",
         "forwardfor",
+        "getsebool",
         "httplog",
         "managehome",
         "maxconn",
         "nologin",
+        "onlyif",
         "pidfile",
         "redispatch",
         "roundrobin",

manifests/main/config.pp

@@ -14,7 +14,8 @@ class confdroid_haproxy::main::config (
 
   if $hy_selinux_allow_stats == true {
     exec { 'setsebool haproxy_connect_any on':
-      path => ['/bin', '/usr/bin', '/sbin', '/usr/sbin'],
+      path   => ['/bin', '/usr/bin', '/sbin', '/usr/sbin'],
+      onlyif => '/usr/sbin/getsebool haproxy_connect_any | /usr/bin/grep -q " --> off$"',
     }
   }
 }