install: apply oo-gear-firewall by default

By default oo-gear-firewall is run to create iptables and selinux
isolation rules. Can be disabled as needed.
Needed to bump ulimit for semanage oo-gear-firewall rules.
install: time/datestamp some slow operations
Merge pull request #472 from sosiouxme/2.2-oo-gear-firewall

install: apply oo-gear-firewall by default
Bug 1154471 - React to RHEL 6.6 shipping rsyslog7
Merge pull request #474 from brenton/BZ1154471

Bug 1154471 - React to RHEL 6.6 shipping rsyslog7
fix missing "then" in conditional
Merge pull request #475 from dobbymoodge/openshiftksfix

fix missing "then" in conditional