From 82de804ec0096337525a2adc7727ca6de793c9a6 Mon Sep 17 00:00:00 2001
From: Phil Sutter <psutter@redhat.com>
Date: Wed, 28 Feb 2018 08:39:09 +0100
Subject: [PATCH] Don't restart services after package update

There's no point in restarting iptables/ip6tables services if
iptables-services package is updated. On the other hand, doing so
potentially breaks VMs in OpenStack since they drop temporary rules.
---
 iptables.spec | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/iptables.spec b/iptables.spec
index fa9982f..9d4cefc 100644
--- a/iptables.spec
+++ b/iptables.spec
@@ -209,7 +209,7 @@ done
 
 %postun services
 /sbin/ldconfig
-%systemd_postun_with_restart iptables.service ip6tables.service
+%systemd_postun iptables.service ip6tables.service
 
 %files
 %{!?_licensedir:%global license %%doc}