linux/meta-openembedded.git/meta-oe/recipes-extended/rsyslog, branch scarthgap

rsyslog: set status for CVE-2015-3243

2025-11-19T03:16:50+00:00

Details: https://nvd.nist.gov/vuln/detail/CVE-2015-3243 The issue is about file permissions: by default rsyslog creates world-readable files. In case a log message contains some sensitive information, then that's exposed to every user on the system. However the rsyslog.conf file that is shipped with the recipe solves it: it already sets non-world-readable default permissions on all files, so this vulnerability is fixed in the default OE recipe. See also this package in OpenSuse[1], where it is solved the same way. [1]: https://build.opensuse.org/requests/619439/changes (rsyslog.conf.in) Signed-off-by: Gyorgy Sarvari Signed-off-by: Anuj Mittal

rsyslog: update from 8.2306.0 to 8.2402.0

2024-03-25T19:51:35+00:00

Change the PACKAGECONFIG[systemd] that wrapped --with-systemdsystemunitdir to use the new --enable-libsystemd option: acb62dfda remove systemd embedded code, use library instead The bug related to using libcap-ng has beeen fixed: https://github.com/rsyslog/rsyslog/pull/5166/commits/030e047fd0c896b4cb2433bab853321eff6f8ec9 so use that library by default now to allow rsyslog to run with fewer privileges. PTest results: sysvinit, systemd TOTAL: 462, 462 PASS: 457, 459 SKIP: 5, 3 XFAIL: 0, 0 FAIL: 0, 0 XPASS: 0, 0 ERROR: 0, 0 Signed-off-by: Randy MacLeod Signed-off-by: Khem Raj

libfastjson: upgrade 0.99.9 -> 1.2304.0

2023-11-06T06:27:15+00:00

Signed-off-by: Khem Raj

rsyslog: Skip failing omfile-outchannel test on musl

2023-08-27T07:11:43+00:00

Signed-off-by: Khem Raj

rsyslog: Enable openssl transport by default

2023-08-27T00:32:44+00:00

gnutls is not enabled in librelp and therefore tests fail becasue it uses openssl but rsyslog uses gnutls, FAIL: sndrcv_relp_tls_prio.sh therefore default to using openssl for both the packages. gnutls can be enabled for both via bbappends but its not default anymore. Signed-off-by: Khem Raj Cc: Nicolas Marguet

librelp: Fix ptest installs to work with dash

2023-08-19T17:46:13+00:00

Suggested-by: Martin Jansa Signed-off-by: Khem Raj

librelp: Fix ptests builds on musl

2023-08-19T17:46:09+00:00

Signed-off-by: Khem Raj

librelp: Add packageconfigs for TLS implementations

2023-08-18T16:54:47+00:00

valgrind is not available on all arches e.g. riscv so enable it conditionally Enable openSSL TLS by default and add option to enable gnuTLS Signed-off-by: Khem Raj

librelp: Fix function prototypes in tests

2023-08-15T19:27:45+00:00

Helps fix issues found with clang Signed-off-by: Khem Raj Cc: Nicolas Marguet

librelp: add ptest

2023-08-15T15:31:23+00:00

Use internal test from librelp project as ptest. This work is largely inspired on the rsyslog ptest implementation, which copies the automake-based tests/Makefile to the target and runs 'make check-TESTS'. sed is used to fix a few Makefile paths or env-vars so 'make' can run on the target. Tested on qemux86_64 and qemuarm64: ========================================== librelp 1.11.0: tests/test-suite.log ========================================== TOTAL: 30 PASS: 27 SKIP: 3 XFAIL: 0 FAIL: 0 XPASS: 0 ERROR: 0 The 3 skipped tests are either self-identified as “not do anything really useful” or may need to port libtool to the target. Signed-off-by: Nicolas Marguet Signed-off-by: Khem Raj