secubox-openwrt/package/secubox/luci-app-wazuh/root/usr/share/rpcd/acl.d/luci-app-wazuh.json
CyberMind-FR b1c34021db feat(wazuh): Add LuCI dashboard for Wazuh SIEM integration
Create luci-app-wazuh package with unified security monitoring dashboard
inspired by SysWarden's layered defense model:

- 4 views: Overview, Alerts, File Integrity, Agents
- RPCD handler with 12 API methods for status, alerts, FIM, agent control
- SysWarden-style 4-layer security visualization:
  - Layer 1: Vortex Firewall + nftables (kernel-level)
  - Layer 2: CrowdSec + Bouncer (IPS)
  - Layer 3: Wazuh Manager (SIEM/XDR)
  - Layer 4: mitmproxy + HAProxy (WAF)
- CrowdSec integration for threat correlation
- Real-time polling and auto-refresh
- Simplified printf-based JSON output (avoids jshn segfault)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-14 14:45:05 +01:00

32 lines
877 B
JSON

{
"luci-app-wazuh": {
"description": "Grant access to Wazuh SIEM dashboard",
"read": {
"ubus": {
"luci.wazuh": [
"get_overview",
"get_agent_status",
"get_manager_status",
"get_alerts",
"get_alert_summary",
"get_fim_events",
"get_fim_config",
"list_agents",
"get_crowdsec_correlation"
]
},
"uci": ["wazuh", "wazuh-manager"]
},
"write": {
"ubus": {
"luci.wazuh": [
"start_agent",
"stop_agent",
"restart_agent"
]
},
"uci": ["wazuh", "wazuh-manager"]
}
}
}