Merge with Debian unstable (LP: #2045033). Remaining changes:
- d/00rsyslog.conf, d/rsyslog.postinst, d/rsyslog.install: Install
tmpfiles.d snippet to ensure that the syslog group can write into
/var/log/.
- debian/50-default.conf: set of default rules for syslog
+ debian/50-default.conf: separated default rules
+ d/rsyslog.install: install default rules
+ d/rsyslog.postrm: clear default rules on purge
+ d/rsyslog.postrm: remove conf file in postrm on purge. manage with ucf
+ d/rsyslog.postinst: Adapt script to use ucf for Ubuntu's config files
+ debian/control: Add Depends for ucf
- debian/rsyslog.conf:
+ enable $RepeatedMsgReduction to avoid bloating the syslog file.
+ enable $KLogPermitNonKernelFacility for non-kernel klog messages
+ Run as syslog:syslog, set $FileOwner to syslog
+ Remove rules moved to 50-default.conf
- Add AppArmor profile, enabled by default, with support for
AppArmor configuration snippets:
+ d/rsyslog.install: install apparmor rule
+ d/rsyslog.postinst: remove disabling of apparmor on upgrades if
we are upgrading from a version older than $now.
+ d/rules: use dh_apparmor to install profile before rsyslog is started
+ d/control: suggests apparmor (>= 2.3), Build-Depends on
dh-apparmor
+ d/rsyslog.dirs: install /etc/apparmor.d/rsyslog.d
+ d/usr.sbin.rsyslogd apparmor profile for rsyslogd
+ d/{apparmor/rsyslog-mysql,rsyslog-mysql.install}: add apparmor
profile for mysql plugin
+ d/{apparmor/rsyslog-pgsql,rsyslog-pgsql.install}: add apparmor
profile for postgresql plugin
+ d/{apparmor/rsyslog-gnutls.apparmor,rsyslog-gnutls.install}: add
apparmor profile for the gnutls plugin
+ d/{apparmor/rsyslog-openssl.apparmor,rsyslog-gnutls.install}: add
apparmor profile for the openssl plugin
+ New script to reload apparmor profile:
- d/rsyslog.service: reload apparmor profile in ExecStartPre and
set StandardError to journal so we can see errors from the
script
- d/rsyslog.install: install reload-apparmor-profile
- d/reload-apparmor-profile: script to reload the
rsyslogd apparmor profile
+ d/NEWS: add info about apparmor changes in the Ubuntu packaging
+ d/rsyslog.docs, d/README.apparmor: explains how the dynamic
component of the rsyslog apparmor profile is applied
+ d/README.apparmor.rsyslog.d, d/rsyslog.install: install a specific
README file in the apparmor include directory for rsyslog
- d/rules: Fix LDFLAGS to avoid segfault on receipt of first message
- Drop [mm|pm]normalize modules, depending on liblognorm from universe.
+ d/rules: drop --enable-mmnormalize & --enable-pmnormalize
+ d/rsyslog.install: remove mmnormalize
- run as user syslog
+ d/rsyslog.postinst: fix ownership of /var/spool/rsyslog.
+ d/rsyslog.postinst: Create syslog user and add it to adm group
+ d/rsyslog.postinst: Adapt privileges for /var/log
+ debian/control: Add Depends for adduser
- d/dmesg.service, d/rsyslog.install: provide /var/log/dmesg.log as
non log-rotated log for boot-time kernel messages.
- debian/clean: Delete some files left over by the test suite
- Add DEP8 tests (LP #1906333): + d/t/control, d/t/simple-logger:
simple logger test
+ d/t/utils: common function(s)
+ d/t/control, d/t/simple-mysql: DEP8 test using rsyslog with a MySQL server
+ d/t/control, d/t/simple-pgsql: DEP8 test using rsyslog with a PostgreSQL server
+ d/t/apparmor-include-mechanism: DEP8 test for the rsyslog.d include mechanism used by the rsyslog apparmor profile
+ ubuntu: update debian/rsyslog.logcheck.ignore.server
+ Amend list of expected messages d/rsyslog.logcheck.ignore.server
to fix6 armhf autopkgtest (LP #2028935)
+ ubuntu: add CAP_MAC_ADMIN, CAP_SETUID, CAP_SETGID
+ ubuntu: adjust sandboxing
+ d/p/omusrmsg-bugfix-potential-double-free-which-can-caus.patch
* New changes
+ d/p/plugins-FromHost-must-be-63-characters-long.patch
rsyslog (8.2312.0-3) unstable; urgency=medium
* Drop unused systemd Build-Depends.
Unfortunately, we can't run the journal related tests during build as
there typically is no journald available in the build environment. So
the systemd Build-Depends is not actually needed.
-- Heinrich Schuchardt <email address hidden> Fri, 12 Jan 2024 13:27:29 +0100
This bug was fixed in the package rsyslog - 8.2312.0-3ubuntu1
---------------
rsyslog (8.2312.0-3ubuntu1) noble; urgency=medium
Merge with Debian unstable (LP: #2045033). Remaining changes: 50-default. conf: set of default rules for syslog 50-default. conf: separated default rules rsyslog. conf: uction to avoid bloating the syslog file. ernelFacility for non-kernel klog messages d/rsyslog. d rsyslog- mysql,rsyslog- mysql.install} : add apparmor rsyslog- pgsql,rsyslog- pgsql.install} : add apparmor rsyslog- gnutls. apparmor, rsyslog- gnutls. install} : add rsyslog- openssl. apparmor, rsyslog- gnutls. install} : add apparmor- profile apparmor- profile: script to reload the apparmor. rsyslog. d, d/rsyslog.install: install a specific mmnormalize & --enable- pmnormalize include- mechanism: DEP8 test for the rsyslog.d include mechanism used by the rsyslog apparmor profile rsyslog. logcheck. ignore. server logcheck. ignore. server bugfix- potential- double- free-which- can-caus. patch
- d/00rsyslog.conf, d/rsyslog.postinst, d/rsyslog.install: Install
tmpfiles.d snippet to ensure that the syslog group can write into
/var/log/.
- debian/
+ debian/
+ d/rsyslog.install: install default rules
+ d/rsyslog.postrm: clear default rules on purge
+ d/rsyslog.postrm: remove conf file in postrm on purge. manage with ucf
+ d/rsyslog.postinst: Adapt script to use ucf for Ubuntu's config files
+ debian/control: Add Depends for ucf
- debian/
+ enable $RepeatedMsgRed
+ enable $KLogPermitNonK
+ Run as syslog:syslog, set $FileOwner to syslog
+ Remove rules moved to 50-default.conf
- Add AppArmor profile, enabled by default, with support for
AppArmor configuration snippets:
+ d/rsyslog.install: install apparmor rule
+ d/rsyslog.postinst: remove disabling of apparmor on upgrades if
we are upgrading from a version older than $now.
+ d/rules: use dh_apparmor to install profile before rsyslog is started
+ d/control: suggests apparmor (>= 2.3), Build-Depends on
dh-apparmor
+ d/rsyslog.dirs: install /etc/apparmor.
+ d/usr.sbin.rsyslogd apparmor profile for rsyslogd
+ d/{apparmor/
profile for mysql plugin
+ d/{apparmor/
profile for postgresql plugin
+ d/{apparmor/
apparmor profile for the gnutls plugin
+ d/{apparmor/
apparmor profile for the openssl plugin
+ New script to reload apparmor profile:
- d/rsyslog.service: reload apparmor profile in ExecStartPre and
set StandardError to journal so we can see errors from the
script
- d/rsyslog.install: install reload-
- d/reload-
rsyslogd apparmor profile
+ d/NEWS: add info about apparmor changes in the Ubuntu packaging
+ d/rsyslog.docs, d/README.apparmor: explains how the dynamic
component of the rsyslog apparmor profile is applied
+ d/README.
README file in the apparmor include directory for rsyslog
- d/rules: Fix LDFLAGS to avoid segfault on receipt of first message
- Drop [mm|pm]normalize modules, depending on liblognorm from universe.
+ d/rules: drop --enable-
+ d/rsyslog.install: remove mmnormalize
- run as user syslog
+ d/rsyslog.postinst: fix ownership of /var/spool/rsyslog.
+ d/rsyslog.postinst: Create syslog user and add it to adm group
+ d/rsyslog.postinst: Adapt privileges for /var/log
+ debian/control: Add Depends for adduser
- d/dmesg.service, d/rsyslog.install: provide /var/log/dmesg.log as
non log-rotated log for boot-time kernel messages.
- debian/clean: Delete some files left over by the test suite
- Add DEP8 tests (LP #1906333): + d/t/control, d/t/simple-logger:
simple logger test
+ d/t/utils: common function(s)
+ d/t/control, d/t/simple-mysql: DEP8 test using rsyslog with a MySQL server
+ d/t/control, d/t/simple-pgsql: DEP8 test using rsyslog with a PostgreSQL server
+ d/t/apparmor-
+ ubuntu: update debian/
+ Amend list of expected messages d/rsyslog.
to fix6 armhf autopkgtest (LP #2028935)
+ ubuntu: add CAP_MAC_ADMIN, CAP_SETUID, CAP_SETGID
+ ubuntu: adjust sandboxing
+ d/p/omusrmsg-
* New changes FromHost- must-be- 63-characters- long.patch
+ d/p/plugins-
rsyslog (8.2312.0-3) unstable; urgency=medium
* Drop unused systemd Build-Depends.
Unfortunately, we can't run the journal related tests during build as
there typically is no journald available in the build environment. So
the systemd Build-Depends is not actually needed.
-- Heinrich Schuchardt <email address hidden> Fri, 12 Jan 2024 13:27:29 +0100