From ad2428456a5c04666f04511876529c5540cd8841 Mon Sep 17 00:00:00 2001
From: 12ww1160 <12ww1160@confdroid.com>
Date: Mon, 7 Sep 2026 14:54:48 +0200
Subject: [PATCH] OP#706 extend exec to run only if found off

---
 .vscode/settings.json    | 2 ++
 manifests/main/config.pp | 3 ++-
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/.vscode/settings.json b/.vscode/settings.json
index 1e87f6f..d16540a 100644
--- a/.vscode/settings.json
+++ b/.vscode/settings.json
@@ -4,10 +4,12 @@
         "dontlognull",
         "dport",
         "forwardfor",
+        "getsebool",
         "httplog",
         "managehome",
         "maxconn",
         "nologin",
+        "onlyif",
         "pidfile",
         "redispatch",
         "roundrobin",
diff --git a/manifests/main/config.pp b/manifests/main/config.pp
index a5d0cab..7a0f81f 100644
--- a/manifests/main/config.pp
+++ b/manifests/main/config.pp
@@ -14,7 +14,8 @@ class confdroid_haproxy::main::config (
 
   if $hy_selinux_allow_stats == true {
     exec { 'setsebool haproxy_connect_any on':
-      path => ['/bin', '/usr/bin', '/sbin', '/usr/sbin'],
+      path   => ['/bin', '/usr/bin', '/sbin', '/usr/sbin'],
+      onlyif => '/usr/sbin/getsebool haproxy_connect_any | /usr/bin/grep -q " --> off$"',
     }
   }
 }