IDPS: replace current ruleset filter option with policy editor

[AdSchellevis]

Problem description

Suricata rules can contain metadata, which can identify the intended audience and purpose of rules (such as expected performance impact, cve's and applications involved, etc, etc).

Although you can already change policies on a per rule basis, this is often rather labor extensive and doesn't cope well with future changes. Using the metadata in the rules should ease maintenance.

While adding these policies it would be practical to move the existing "filter" construction available in the rulesets as well, to avoid confusion on what to set where (in which case as policy would just turn into a filter and action to perform).

Planned change

A new form containing a grid which contains policies in which case someone can select rules from one or multiple rulesets and a planned action to perform.

An example could be select all threads aimed at Adobe flash with critical severity and drop traffic when hit.

Since the current "drop" filter rules would evaluate as select all alert rules in file and drop traffic, it should be a rather easy migration