Description of problem:
Sorry if this is filed against the wrong component. Here are the facts:

Fresh current install of RHEL5 (behavior is apparent on all my RHEL5 boxes).
selinux is running in enforcing mode.

service iptables status does not return the usual information while in enforcing
mode. There are no AVC messages or logged information that I can find related to
this. After setenforce 0 the command returns the usual information.

More details below.

Version-Release number of selected component (if applicable):
selinux-policy-2.4.6-30.el5, selinux-policy-targeted-2.4.6-30.el5

How reproducible:
always

Steps to Reproduce:
1. selinux running in enforcing mode
2. iptables running
3. run service iptables status (or /etc/init.d/iptables status)
  
Actual results:
[root@osiris ~]# service iptables status
Table: filter

[root@osiris ~]#

Expected results:
Table: filter
Chain INPUT (policy ACCEPT)
num  target     prot opt source               destination         
1    RH-Firewall-1-INPUT  all  --  0.0.0.0/0            0.0.0.0/0           

Chain FORWARD (policy ACCEPT)
num  target     prot opt source               destination         
1    RH-Firewall-1-INPUT  all  --  0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT)
num  target     prot opt source               destination         

Chain RH-Firewall-1-INPUT (2 references)
num  target     prot opt source               destination         
1    ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0           
2    ACCEPT     icmp --  0.0.0.0/0            0.0.0.0/0           icmp type 255 
3    ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0           state
RELATED,ESTABLISHED 
4    ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state NEW tcp
dpt:22 
5    REJECT     all  --  0.0.0.0/0            0.0.0.0/0           reject-with
icmp-host-prohibited 

or something similar.

Additional info:
Curiously in enforcing mode I can get the usual output if I do the following:
[root@osiris ~]# bash /etc/init.d/iptables status
Table: filter
Chain INPUT (policy ACCEPT)
num  target     prot opt source               destination         
1    RH-Firewall-1-INPUT  all  --  0.0.0.0/0            0.0.0.0/0
...
whereas
[root@osiris ~]# /etc/init.d/iptables status
Table: filter

[root@osiris ~]#
returns nothing.

[root@osiris ~]# ll -Z /etc/*/iptables*
-rwxr-xr-x  root root system_u:object_r:initrc_exec_t  /etc/init.d/iptables
-rw-------  root root system_u:object_r:etc_t          /etc/sysconfig/iptables
-rw-r--r--  root root system_u:object_r:etc_runtime_t 
/etc/sysconfig/iptables-config

[root@osiris ~]# grep -i avc /var/log/audit/audit*
[root@osiris ~]#