The major reason firewalld was delayed from f17 is the config tool wasn't ready, so obviously we reckon it's important. So, we should probably have firewall-config installed 'by default' (not that there's a default any more). We could put in the 'admin-tools' group, I guess, in place of system-config-firewall, s-c-f is 'optional' there. Should we make it 'default'? Do we also want to ask the firewalld folks what kind of TUI options there are for configuring firewalld, since we had s-c-f-tui for non-graphical installs prior to firewalld?
Sure, added. It includes a CLI, not a TUI; I would think that should be enough.