Description of problem: firewalld, in most versions which support product-specific policies, at least including firewalld-0.4.4.3-2.fc24.noarch but also in RHEL packages, ships > /usr/share/polkit-1/actions/org.fedoraproject.FirewallD1.desktop.policy > /usr/share/polkit-1/actions/org.fedoraproject.FirewallD1.policy > /usr/share/polkit-1/actions/org.fedoraproject.FirewallD1.server.policy This does not do what firewalld wants (allow using the *1.policy symlink to choose the active configuration) because polkit simply reads *.policy from that directory, with an unspecified handling of duplicate action IDs. (In fact the duplicate action IDs trigger a memory corruption, a likely cause of bug 1442840 .)
Fixed upstream: https://github.com/t-woerner/firewalld/commit/0c480ec760c3ecaeea325041bdffc6d3d1153d88
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2017:1934