Firewall: Open Services Permanently

This host uses firewalld. Two services must be reachable permanently in the default (public) zone. Your per-session assignment is in /root/case/assignment.env (SVC_A, SVC_B — firewalld service names). firewalld stores each zone's permanent configuration as XML under /etc/firewalld/zones/; the public zone is at /etc/firewalld/zones/public.xml. Add both assigned services to that zone's permanent configuration so they persist across a reload/reboot. (The firewall-cmd tool and a running firewalld daemon aren't available on the shared base, so edit the permanent zone file directly — that XML is exactly what firewall-cmd --permanent --add-service writes, and it's what grading reads.)