lp:ubuntu/utopic/rsyslog

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

65. By Marc Deslauriers on 2014-10-09

* SECURITY UPDATE: denial of service and possible code execution via
  invalid PRI value
  - debian/patches/CVE-2014-3634.patch: limit PRI values in
    grammar/rainerscript.h, plugins/imfile/imfile.c,
    plugins/imklog/imklog.c, plugins/imkmsg/imkmsg.c,
    plugins/imsolaris/imsolaris.c, plugins/imuxsock/imuxsock.c,
    runtime/msg.c, runtime/parser.c, runtime/rsyslog.h,
    runtime/srutils.c, runtime/syslogd-types.h, runtime/typedefs.h,
    tools/syslogd.c.
  - CVE-2014-3634
  - CVE-2014-3683

64. By Jamie Strandboge on 2014-09-09

debian/usr.sbin.rsyslog: allow 'rk' to /run/utmp (LP: #1366261)

63. By Jamie Strandboge on 2014-09-04

* debian/usr.sbin.rsyslog: update for abstract socket mediation
  (LP: #1362199)
* debian/control: Suggests apparmor >= 2.8.96~2541-0ubuntu4~

62. By Dimitri John Ledkov on 2014-08-08

* Build depend on libgcrypt20-dev.
* Build depend on libgnutls28-dev.

61. By Martin Pitt on 2014-07-31

debian/rsyslog.logrotate: Call "rotate" action for rotation instead of
"reload". (LP: #1331891)

60. By Dimitri John Ledkov on 2014-07-08

Use "service" command in rsyslog's postrotate, since naked "reload"
fails under non-upstart init. (LP: #1331891)

59. By Chris J Arges on 2014-07-01

Enable non-kernel facility klog messages. (LP: #1274444)

58. By Dimitri John Ledkov on 2014-05-28

No change rebuild against new dh_installinit, to call update-rc.d at
postinst.

57. By Colin Watson on 2013-12-04

* debian/rsyslog.postinst: Make sure /var/log is owned by group syslog and
  is group-writeable (LP: #1256695).
* Ensure that rsyslogd can create files in group adm, even when dropping
  group privileges to syslog (LP: #484336):
  - debian/patches/10-initgroups.patch: Try to set appropriate
    supplementary groups before dropping UID.
  - debian/rsyslog.postinst: Add syslog user to group adm.

56. By Steve Langasek on 2013-10-21

* Merge from Debian unstable, remaining changes:
  - Run as rsyslog:rsyslog, set $FileOwner to syslog
  - Replace init script with debian/rsyslog.upstart.
  - debian/rsyslog.logrotate: Use reload command to restart rsyslog
  - debian/rsyslog.conf: enable $RepeatedMsgReduction
    to avoid bloating the syslog file.
  - Add debian/rsyslog.dmesg.upstart to save initial dmesg into a file.
    Install it in debian/rules.
  - debian/50-default.conf: set of default rules for syslog (forwarded to
    Debian #603160). remove file in postrm on purge. manage with ucf.
  - Add disabled by default AppArmor profile:
    + debian/rsyslog.upstart: add pre-start stanza to load profile
    + add debian/usr.sbin.rsyslogd profile
    + debian/rules: use dh_apparmor to install profile before rsyslog is
      restarted
    + debian/control: suggests apparmor (>= 2.3)
    + debian/rsyslog.install: install profile to /etc/apparmor.d
    + debian/rsyslog.dirs: install /etc/apparmor.d/force-complain,
      and /etc/apparmor.d/disable
    + debian/rsyslog.preinst: disable profile on clean install or upgrades
      from earlier than when we shipped the profile
    + debian/control: Build-Depends on dh-apparmor
  - debian/rsyslog.postrm: fixed typo "dissappear" to "disappear".
  - debian/rsyslog.postinst: fix ownership of /var/spool/rsyslog.
  - Adjust rsyslog init script to detect upstart, making the upstart
    patches upstreamable to Debian.
  - Add versioned dependency on lsb-base for the use of init_is_upstart.
* Dropped changes:
  - debian/patches/04-fix_startup_deadlock.patch: superseded upstream.
  - debian/patches/201-PreserveFQDN-not-working: originally from upstream.
  - debian/patches/202-off-by-one-regression-1187808.patch: originally
    from upstream.
* debian/rules: filter out -Wl,-Bsymbolic-functions only, instead of
  overriding all LDFLAGS.
* Drop rsyslog-mongodb package, depends on libmongo-client which is not
  in main.
* Drop mmnormalize module, which depends on liblognorm from universe.
* Build with --disable-silent-rules to get useful build logs.