Create luci-app-wazuh package with unified security monitoring dashboard inspired by SysWarden's layered defense model: - 4 views: Overview, Alerts, File Integrity, Agents - RPCD handler with 12 API methods for status, alerts, FIM, agent control - SysWarden-style 4-layer security visualization: - Layer 1: Vortex Firewall + nftables (kernel-level) - Layer 2: CrowdSec + Bouncer (IPS) - Layer 3: Wazuh Manager (SIEM/XDR) - Layer 4: mitmproxy + HAProxy (WAF) - CrowdSec integration for threat correlation - Real-time polling and auto-refresh - Simplified printf-based JSON output (avoids jshn segfault) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
32 lines
877 B
JSON
32 lines
877 B
JSON
{
|
|
"luci-app-wazuh": {
|
|
"description": "Grant access to Wazuh SIEM dashboard",
|
|
"read": {
|
|
"ubus": {
|
|
"luci.wazuh": [
|
|
"get_overview",
|
|
"get_agent_status",
|
|
"get_manager_status",
|
|
"get_alerts",
|
|
"get_alert_summary",
|
|
"get_fim_events",
|
|
"get_fim_config",
|
|
"list_agents",
|
|
"get_crowdsec_correlation"
|
|
]
|
|
},
|
|
"uci": ["wazuh", "wazuh-manager"]
|
|
},
|
|
"write": {
|
|
"ubus": {
|
|
"luci.wazuh": [
|
|
"start_agent",
|
|
"stop_agent",
|
|
"restart_agent"
|
|
]
|
|
},
|
|
"uci": ["wazuh", "wazuh-manager"]
|
|
}
|
|
}
|
|
}
|