Ensure a complete relabeling when switching from disabled to permissive or enforcing

[vinzent]

Affected Puppet, Ruby, OS and module versions/distributions

• Module version: 0.5.1-rc0

How to reproduce (e.g Puppet code you use)

• pre-requirements: systems has selinux disabled but selinux packages installed

class { 'selinux':
  mode => 'permissive',
  type   => 'targeted',
}

What are you seeing

selinux configured for enforcing, but no autorelabel trigger file is created

What behaviour did you expect instead

When SELinux is disabled and desired state is permissive or enforcing the module must create the /.autorelabel trigger file

Any additional information you'd like to impart

If a system has selinux disabled and wants to switch to permissive or enforcing mode a complete relabeling of the filesystem is necessary as within disabled mode no filesystem attributes regarding contexts are written, thus leaving it in a inconsitent state.