security_context.rb

module Itamae
  module Resource
    class SecurityContext < Base
      define_attribute :action, default: :nothing
      define_attribute :path, type: [String], default_name: true
      define_attribute :recursive, type: [TrueClass, FalseClass], default: false

      def action_restore(options)
        cmd = ['restorecon', attributes.path]
        cmd << '-R' if attributes.recursive
        run_command cmd
      end
    end
  end
end

See https://github.com/KitaitiMakoto/itamae-plugin-resource-security_context