Os valores que você dá aos seus vários atributos precisam ser o que o sistema espera que eles sejam.
name
(Namevar: If omitted, this attribute’s value defaults to the resource’s title.)
The name of the SELinux boolean to be managed.
provider
The specific backend to use for this selboolean resource. You will seldom need to specify this — Puppet will usually discover the appropriate provider for your platform.
Tente
selboolean { 'scan system':
name => 'antivirus_can_scan_system',
persistent => true,
value => on,
}