Description of problem:

Specifying a kickstart firewall command does not change the default configuration. anaconda.program.log show the execution of firewall-offline-cmd, but afterwards the firewall is configured as always.

I wanted the firewall configured without the dhcpv6-client so I specified:

firewall --enable --service=mdns,ssh

Did I do something worng?


Version-Release number of selected component (if applicable):

anaconda-19.20-1.fc19.x86_64
pykickstart-1.99.26-1.fc19.noarch


How reproducible: Consistent


Steps to Reproduce:

# Create the Anaconda Kickstart file

  if [ ! -d /srv/nfs/ISO/Fedora19 ]
  then
    mkdir /srv/nfs/ISO/Fedora19
  fi

  cat >/srv/nfs/ISO/Fedora19/anaconda-ks.cfg <<EOF
auth       --enableshadow --passalgo=sha512
autopart   --type=lvm
bootloader --location=mbr --boot-drive=vda
cdrom
clearpart  --all --initlabel --drives=vda
firewall   --enable --service=mdns,ssh
firstboot  --disable
ignoredisk --only-use=vda
keyboard   --vckeymap=us --xlayouts='us'
lang         en_US.UTF-8
network    --activate --bootproto=static --device=eth0 --gateway=192.168.1.254 --ip=192.168.1.21 --nameserver=75.75.76.76,75.75.75.75 --netmask=255.255.255.0 --noipv6
# network    --activate --bootproto=dhcp --device=eth0 --nameserver=192.168.1.11 --noipv6
network    --hostname=fedora19.hunter.org
reboot
rootpw     --iscrypted \$6\$6YuUd3dm5L5ALg25\$I6Tg.twaZxA/NePE/yNTmY3HoUNt5Za5vDQMjCGB8Fp22ANG0y0usmAn/f14xGwDZ1QcSVWTWqDjl7kDkSZAO/
text
timezone     America/Chicago --isUtc --ntpserver=192.168.1.11
user       --gecos="Local Administrator" --groups=wheel --iscrypted --name=local --password=\$6\$6YuUd3dm5L5ALg25\$I6Tg.twaZxA/NePE/yNTmY3HoUNt5Za5vDQMjCGB8Fp22ANG0y0usmAn/f14xGwDZ1QcSVWTWqDjl7kDkSZAO/
xconfig    --startxonboot

%packages
@base-x
@core
@dial-up
@firefox
@fonts
@gnome-desktop
@hardware-support
@input-methods
@multimedia
@printing
@standard
%end

%post
  set -v

# Configure the firewall

  firewall-cmd --permanent --remove-service=dhcpv6-client
  firewall-cmd --list-all

# Configure the Gnome desktop

  cat >/usr/share/glib-2.0/schemas/hunter.gschema.override <<EOD
[org.gnome.desktop.background]
picture-options='wallpaper'
# picture-uri='file:///usr/share/backgrounds/gnome/Waves.jpg'
picture-uri='file:///usr/share/backgrounds/gnome/BlueMarbleWest.jpg'
primary-color='#ffffff'
secondary-color='#000000'

[org.gnome.desktop.interface]
clock-show-date=true

[org.gnome.desktop.screensaver]
lock-enabled=false

[org.gnome.desktop.sound]
event-sounds=false

[org.gnome.gedit.preferences.editor]
create-backup-copy=false
wrap-mode='none'

[org.gnome.nautilus.preferences]
default-folder-viewer='list-view'
sort-directories-first=true

[org.gnome.shell]
always-show-log-out=true
favorite-apps=['gnome-terminal.desktop', 'nautilus.desktop', 'gedit.desktop', 'firefox.desktop']

EOD

  chcon --user system_u /usr/share/glib-2.0/schemas/hunter.gschema.override
  chcon --type usr_t    /usr/share/glib-2.0/schemas/hunter.gschema.override

  glib-compile-schemas  /usr/share/glib-2.0/schemas

# Configure the host name

  hostnamectl set-hostname "Fedora19" --pretty
  hostnamectl

# Apply any queued updates

  cat >>/etc/yum.conf <<EOD
clean_requirements_on_remove=yes
upgrade_requirements_on_install=yes
EOD

# yum install --assumeyes yum-plugin-fastestmirror
  yum update  --assumeyes

%end
EOF

# Build a virtual machine

  virsh destroy  Fedora19
  virsh undefine Fedora19

  virt-install \
    --autostart \
    --connect qemu:///system \
    --disk vol=Guests/Fedora19 \
    --extra-args "inst.ks=file:/anaconda-ks.cfg" \
    --graphics spice \
    --initrd-inject /srv/nfs/ISO/Fedora19/anaconda-ks.cfg \
    --location /srv/nfs/ISO/Fedora-19-Alpha-x86_64-DVD.iso \
    --name Fedora19 \
    --network network=Host \
    --noautoconsole \
    --os-type "linux" \
    --os-variant "fedora18" \
    --ram 2048 \
    --vcpus 2


Actual results:

1:33:11,945 INFO program: done
21:33:11,945 DEBUG program: Return code: 0
21:33:12,148 INFO program: Running... /usr/sbin/authconfig --update --nostart --enableshadow --passalgo=sha512
21:33:13,734 DEBUG program: Return code: 0

[root@fedora19 ~]# firewall-cmd --list-all
public
  interfaces: eth0
  services: mdns dhcpv6-client ssh
  ports: 
  forward-ports: 
  icmp-blocks: 
[root@fedora19 ~]# 


Expected results:

[root@fedora19 ~]# firewall-cmd --list-all
public
  interfaces: eth0
  services: mdns ssh
  ports: 
  forward-ports: 
  icmp-blocks: 
[root@fedora19 ~]# 


Additional info: