saving uncommitted changes in /etc prior to dnf run

firewalld/firewalld.conf

@@ -23,6 +23,8 @@ Lockdown=no
 # packet would be sent via the same interface that the packet arrived on, the 
 # packet will match and be accepted, otherwise dropped.
 # The rp_filter for IPv4 is controlled using sysctl.
+# Note: This feature has a performance impact. See man page FIREWALLD.CONF(5)
+# for details.
 # Default: yes
 IPv6_rpfilter=yes