pfSense

touch up text

Fix match for help pages privileges, it fixes #3777

Implement privilege for allowing login through CP

- The feature is optional, on by default for new zones, off for current
ones when upgrading

It should fix #1010

Add initial support for a privilege that denies write access to the config.
NOTE: This only prevents writing to config.xml - it does NOT prevent other changes/execution that do not involve writing to config.xml (e.g. applying settings, exec, killing states, etc)

fix missing match on help pages permission

fix permissions check to xml package files and show only menus user has access to

Fix description

Move these permissions to user.priv.inc so they don't get blasted when priv.defs.inc is automatically regenerated.

Conflicts:

etc/inc/priv.defs.inc

Add an IPsec xauth permission. Try to use the nologin shell first (just unlock the account). Ticket #1202

Add SSH tunneling privilege to list of available privileges.