class sshdclass {
        define resetpolicy($file) {
                exec { restorecon:
                command => "restorecon $file",
                refreshonly => true,
        }
        file { "/etc/ssh/sshd_config":
                source => "puppet:///files/all/etc/ssh/sshd_config",
                mode => 0600,
                require => Package["openssh"],
                notify => Exec[sshd_restart],
                resetpolicy { puppet: file => "/etc/ssh/sshd_config" }
        }
        package { "openssh":
                ensure => installed,
        }
        exec { sshd_restart:
               command => "/etc/init.d/sshd restart",
               refreshonly => true,
        }
}