As a selinux module user I would like the following:
The selinux configuration should map to the selinux mode directly, e.g., selinux::mode which is an Enum ['enforcing', 'permissive', 'disabled']. This mode unambiguously specifies the state desired.
I should be able to manage any selinux policy or exemptions
We should consider https://github.com/voxpupuli/puppet-selinux for this ticket.