action :add do
  e = execute "add port #{new_resource.port} to zone" do
    not_if "firewall-cmd --permanent #{zone} --query-port=#{new_resource.port}"
    command(<<-EOC)
      firewall-cmd #{zone} --add-port=#{new_resource.port}