release/004.049: fix logic issue with ping capability adjustment

NEWS

+release/004.049 (2015-07-22)
+
+    [os] Small fix to the 'ping' capability adjustment: grep -v does not
+    return 0 on success, so change "onlyif" to "unless" (adamhl)
+
 release/004.048 (2015-06-24)
 
     [newsyslog] Change permissions of /var/log/btmp to '600' in RHEL
-    systems so that sshd stops complaining. This is because RHEL builds 
-    of openssh are paranoid about the frequency that passwords are 
+    systems so that sshd stops complaining. This is because RHEL builds
+    of openssh are paranoid about the frequency that passwords are
     mistakenly entered as usernames. If the utmp group is compromised,
     there could be enough context to get real account credentials (jlent)
 
-    [dns] Make dns_cache a class-level parameter, so that it can be set in 
+    [dns] Make dns_cache a class-level parameter, so that it can be set in
     Hiera (as base::dns::dns_cache) (akkornel)
 
-    [dns] Add support for Livermore, via Hiera.  Set base::dns::livermore (in 
+    [dns] Add support for Livermore, via Hiera.  Set base::dns::livermore (in
     Hiera) to true, and Livermore DNS gets added to resolv.conf (akkornel)
 
-    [dns] Add support for disabling Puppet management of resolv.conf, for 
+    [dns] Add support for disabling Puppet management of resolv.conf, for
     systems using DHCP (akkornel)
 
-    [remctl] Require remctl-server package be installed before installing 
+    [remctl] Require remctl-server package be installed before installing
     xinetd config (akkornel)
 
 release/004.047 (2015-06-17)

manifests/os/debian.pp

@@ -149,7 +149,7 @@ class base::os::debian {
     exec { 'setcap ping':
       path    => "/usr/bin:/usr/sbin:/bin:/sbin",
       command => 'setcap cap_net_raw+ep /bin/ping',
-      onlyif  => "getcap /bin/ping | grep -v 'cap_net_raw+ep'",
+      unless  => "getcap /bin/ping | grep -q 'cap_net_raw+ep'",
     }
   }