READ=shorewall:status,shorewall:details,shorewall:logfile
UPDATE=shorewall:editrecords,shorewall:config,shorewall:check,shorewall:listfiles,shorewall:edit,shorewall:startstop