Additions

This PR isn't intended to be merged entirely, more to ping @bazsi ;o)
Here are some of the open issues:

* the naming schema for name-value pairs is probably a mess. If pdb is to make it to dists (which would be awesome) we really need something consistent. Some form of convention has apparently already made it to syslog-ng-3.6.1 (unix.*, audit.*) or is existing (classifier.*), but I guess we need to discuss this
* as we all seem to agree actions should be separated from rules, the actions present in this PR can probably be ignored
* `pam_unix` ruleset obviously conflicts with various pdb files in `access/*` due to balabit/syslog-ng/issues/294
* solaris rules might be cluttered up by the `msgid` which is on by default on Solaris, and it should be disabled or preparsed (dropped)