action :change do
  e = execute "change source #{new_resource.source} to zone" do
    not_if "firewall-cmd --permanent #{zone} --query-source=#{new_resource.source}"
    command(<<-EOC)
      firewall-cmd #{zone} --change-source=#{new_resource.source}