Redhat/Fedora requires var/lock/subsys/ipsec for runlevel changes