diff --git a/manifests/iptables/fragment.pp b/manifests/iptables/fragment.pp
index cb8377208e8b36f540a112604af8abc6a14ee6e6..50e99a847471af0b23dfe8be388617a27cd403aa 100644
--- a/manifests/iptables/fragment.pp
+++ b/manifests/iptables/fragment.pp
@@ -3,9 +3,11 @@
 # Install or remove an iptables fragment.  All fragments should be located in
 # the iptables module so that we have some central management of them.
 
-define base::iptables::fragment($ensure,
-                          $source=NOSRC,
-                          $content=NOCONTENT) {
+define base::iptables::fragment(
+  $ensure,
+  $source  = 'NOSRC',
+  $content = 'NOCONTENT'
+) {
     $realname = "/etc/iptables.d/$name"
     $codename = "iptables::fragment"
     $basefile = "puppet:///modules/base/iptables/fragments/$name"
diff --git a/manifests/tripwireclient.pp b/manifests/tripwireclient.pp
index 990a3d27777d4722b3575f17af4686299fa00828..9d0f0ed560ad4f3b8d3dc5f607530cf899f00e3f 100644
--- a/manifests/tripwireclient.pp
+++ b/manifests/tripwireclient.pp
@@ -6,13 +6,13 @@ class base::tripwireclient {
     file {
         '/etc/cron.daily/tripwire':
             source => 'puppet:///modules/base/tripwireclient/etc/cron.daily/tripwire',
-            mode   => 755;
+            mode   => '0755';
         '/etc/filter-syslog/tripwire':
             source => 'puppet:///modules/base/tripwireclient/etc/filter-syslog/tripwire';
         '/etc/tripwire':
             ensure => directory,
-            mode   => 755;
+            mode   => '0755';
         '/etc/tripwire/config':
             source => 'puppet:///modules/base/tripwireclient/etc/tripwire/config';
     }
-}
\ No newline at end of file
+}