A system log parser designed to aid in generating apparmor and iptables rules.
C++ Vala Makefile
Switch branches/tags
Nothing to show
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Failed to load latest commit information.
.gitignore
LICENSE
Makefile
README.md
Threadpool.cpp
Threadpool.h
caller.vala
syslogparse.cpp
usr.bin.syslogparse

README.md

SyslogParser

A system log parser designed to make use of system resources to be as fast as possible.

This is a largely complete project. I'll do little things to it, but it does what I needed it to do, and building a GUI around it doesn't make sense.

Goals

The goal of this program is to sort through the system log, find iptables and apparmor violations, and generate usable rules based on them.

All of this is done within a threaded, sandboxed process.

Build Instructions

$ make all
$ sudo make install

run with syslogparse [parameter] [path] 

requires libseccomp and libcap-ng. Both can be installed by apt or compiled from source.