define securefile () {
        file{"${name}":   
                source => "puppet:///files/all/${name}",
                mode   => 0600,
                notify => Exec["restorecon-${name}"]
        }

        exec{"restorecon-${name}"
                command         => "/sbin/restorecon ${name}",
                refreshonly     => true,
        }

}

class ssh_service_and_config {
        securefile{"/etc/ssh/ssh_config": 
                notify  => Service["sshd"],
        }

        service{"sshd":
                ensure          => enabled,
                refreshonly     => true,
        }
}