template '/etc/hosts.allow' do
    source 'etc_hosts.allow.erb'
    mode '0644'
    variables( :rules => node['sys']['hosts']['allow'] )
    not_if { node['sys']['hosts']['allow'].empty? }