READ=shorewall:status,shorewall:logfile
UPDATE=shorewall:editrecords,shorewall:config,shorewall:check,shorewall:expert,shorewall:edit