Bug 1314962 - iptables-services package dependency issue
iptables-services package dependency issue
Status: CLOSED DUPLICATE of bug 1246380
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: iptables (Show other bugs)
x86_64 Linux
unspecified Severity medium
: rc
: ---
Assigned To: Thomas Woerner
Depends On:
  Show dependency treegraph
Reported: 2016-03-05 02:19 EST by oakwhiz
Modified: 2016-07-01 06:04 EDT (History)
1 user (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2016-07-01 06:04:11 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

External Trackers
Tracker ID Priority Status Summary Last Updated
CentOS 10492 None None None 2016-03-05 02:22 EST

  None (edit)
Description oakwhiz 2016-03-05 02:19:04 EST
User-Agent:       Mozilla/5.0 (Windows NT 6.3; WOW64; rv:44.0) Gecko/20100101 Firefox/44.0
Build Identifier: 

iptables-services is dependent on policycoreutils.

If policycoreutils is not installed, iptables-services does not function correctly. Rules are not saved automatically or manually, as shown below:

# service iptables save
iptables: Saving firewall rules to /etc/sysconfig/iptables: /usr/libexec/iptables/iptables.init: line 315: restorecon: command not found

However the yum packages do not reflect this dependency and it is possible to install iptables-services without installing policycoreutils. This causes some frustration, since iptables-services loads rules from defaults on boot, which blocks most incoming traffic. It is also difficult to determine the cause of the problem through systemctl status.

Installing policycoreutils fixes the problem.

Reproducible: Always

Steps to Reproduce:
1. Don't install policycoreutils
2. Install iptables-services
3. Notice that iptables and ip6tables are not persistent
4. Notice that rules cannot be saved manually either
5. Install policycoreutils
6. Notice that everything works now
Comment 1 oakwhiz 2016-03-05 02:21:05 EST
Bug originally filed against CentOS here:
Comment 3 Thomas Woerner 2016-07-01 06:04:11 EDT

*** This bug has been marked as a duplicate of bug 1246380 ***

Note You need to log in before you can comment on or make changes to this bug.