define nodo::subsystem::grsec::paxctl(
  $file,
  $flags,
)
{
  exec { "paxctl-${name}":
    command => "/sbin/paxctl -${flags} ${file}",
    user    => "root",
    require => Package['paxtest'],
  }
}