openshift.ks: Stop using lokkit

Declare firewall_allow as an associative array at the bottom of
openshift.ks.  Set protocol:port rules (e.g., udp:53) in this associative
array wherever previously lokkit was used.

Add configure_firewall function, which disables lokkit and writes a basic
ruleset to /etc/sysconfig/iptables.

Add configure_firewall_add_rules, which iterates over ${firewall_allow[@]}
and adds ACCEPT rules to /etc/sysconfig/iptables for the rules defined in
${firewall_allow[@]}.

configure_host: Call configure_firewall.

configure_openshift: Call configure_firewall_add_rules.

restart_services: Restart the iptables service to pick up rules added to
/etc/sysconfig/iptables.

This commit fixes bug 1067794.
Merge pull request #390 from Miciah/bug-1067794-eliminate-use-of-lokkit

openshift.ks: Stop using lokkit
openshift.ks: Don't restart services for kickstart

Check whether the script is being run as a kickstart script and, if so,
do not restart services at the very end of the script.  Doing so is
unnecessary because the host is about to reboot anyway once the kickstart
script finishes its execution, it takes time, and it generates a bunch of
error messages for services that cannot successfully start in a kickstart
environment.

This commit fixes bug 1121293.
Merge pull request #415 from Miciah/bug-1121293-dont-restart-services-for-kickstart

openshift.ks: Don't restart services for kickstart