Suggested by: @DokuKaefer

Suggested by: @Antonio-Prado

(proxy) add constraint on filename for remoteacl, closes https://github.com/opnsense/core/issues/700

Whitelisting in Suhosin is needed to make this work, but
unfortunately this will disable whitelisting for all of
phar.  A pretty debatable design choice, but for now we
keep this on -devel until we know what to do...

Constraints hook into the default validations, new constraints should derive from BaseConstraint.
This commit contains the code needed to add constraints to our model and a unittest for the UniqueConstraint option.

Add the following to a model field, to force uniqueness for a combination of keys:

<Constraints>
  <check001>                                                 <!--validation name, unique within this field-->
    <message>number should be unique</message>               <!--the message to output on validation failure -->
    <type>OPNsense\Base\Constraints\UniqueConstraint</type>  <!--the class to construct, derived from OPNsense\Base\Constraints\BaseConstraint -->
    <addFields>                                              <!--optional additional fields for the equation, defined in UniqueConstraint -->
       <field1>optfield</field1>
    </addFields>
  </check001>
</Constraints>

If there is not enough space in /tmp, it's really nothing we
can do about here.  This is not an essential file.

Taking the liberty to use this as an opportunity to kill the
usage of "e-mail".

Suggested by: @Antonio-Prado

Improve error messages for API calls

Example before: {"errorMessage":"Undefined offset: 0 [8]"}
Example after: {"errorMessage":"Error at \/usr\/local\/etc\/inc\/util.inc:952 - Undefined offset: 0 (errno=8)"}

While there, turn the probing upside down for general sanity:

o Only pull dmesg output once
o Pattern-match one pattern only
o Anchor the match to the line start

(get_interface_list) Properly handle an interface not appearing in dmesg

Also see: http://www.openssh.com/txt/release-7.0

The console would refuse to assign an IP that was used by the
PPTP or L2TP server (surprisingly not PPPoE).  This rule changed
during the MPD4 -> MDP5 migration, so remove that code.  Also,
the subnet check was never executed, good time to remove it as
well.

Spotted by: @fabianfrz

Reported by: @Antonio-Prado