User-Agent:       Mozilla/5.0 (Windows NT 6.3; WOW64; rv:44.0) Gecko/20100101 Firefox/44.0
Build Identifier: 

iptables-services is dependent on policycoreutils.

If policycoreutils is not installed, iptables-services does not function correctly. Rules are not saved automatically or manually, as shown below:

# service iptables save
iptables: Saving firewall rules to /etc/sysconfig/iptables: /usr/libexec/iptables/iptables.init: line 315: restorecon: command not found


However the yum packages do not reflect this dependency and it is possible to install iptables-services without installing policycoreutils. This causes some frustration, since iptables-services loads rules from defaults on boot, which blocks most incoming traffic. It is also difficult to determine the cause of the problem through systemctl status.

Installing policycoreutils fixes the problem.

Reproducible: Always

Steps to Reproduce:
1. Don't install policycoreutils
2. Install iptables-services
3. Notice that iptables and ip6tables are not persistent
4. Notice that rules cannot be saved manually either
5. Install policycoreutils
6. Notice that everything works now