diff --git a/.vscode/settings.json b/.vscode/settings.json
index 1e87f6f..d16540a 100644
--- a/.vscode/settings.json
+++ b/.vscode/settings.json
@@ -4,10 +4,12 @@
         "dontlognull",
         "dport",
         "forwardfor",
+        "getsebool",
         "httplog",
         "managehome",
         "maxconn",
         "nologin",
+        "onlyif",
         "pidfile",
         "redispatch",
         "roundrobin",
diff --git a/manifests/main/config.pp b/manifests/main/config.pp
index a5d0cab..7a0f81f 100644
--- a/manifests/main/config.pp
+++ b/manifests/main/config.pp
@@ -14,7 +14,8 @@ class confdroid_haproxy::main::config (
 
   if $hy_selinux_allow_stats == true {
     exec { 'setsebool haproxy_connect_any on':
-      path => ['/bin', '/usr/bin', '/sbin', '/usr/sbin'],
+      path   => ['/bin', '/usr/bin', '/sbin', '/usr/sbin'],
+      onlyif => '/usr/sbin/getsebool haproxy_connect_any | /usr/bin/grep -q " --> off$"',
     }
   }
 }