CentOS howto IV - Poking holes in security (in a meaningful way)

1. Add an existing service
1. firewall-cmd --permanent --zone=public --add-service=https
2. firewall-cmd --reload
2. Create a new service (to be added as above). In this example we will be using livereload default port 35729
1. firewall-cmd --permanent --new-service=live-reload
2. firewall-cmd --permanent --service=live-reload --set-description="live reload"
3. firewall-cmd --permanent --service=live-reload --set-short="live reload"
4. firewall-cmd --permanent --service=live-reload --add-port=35729/tcp
3. Enabling an application (node.js in this example) to bind ports <1024
1. setcap 'cap_net_bind_service=+ep'/ usr/bin/node