[ubuntu/noble-proposed] rsyslog 8.2312.0-3ubuntu1 (Accepted)
Heinrich Schuchardt
heinrich.schuchardt at canonical.com
Tue Jan 16 16:10:12 UTC 2024
rsyslog (8.2312.0-3ubuntu1) noble; urgency=medium
Merge with Debian unstable (LP: #2045033). Remaining changes:
- d/00rsyslog.conf, d/rsyslog.postinst, d/rsyslog.install: Install
tmpfiles.d snippet to ensure that the syslog group can write into
/var/log/.
- debian/50-default.conf: set of default rules for syslog
+ debian/50-default.conf: separated default rules
+ d/rsyslog.install: install default rules
+ d/rsyslog.postrm: clear default rules on purge
+ d/rsyslog.postrm: remove conf file in postrm on purge. manage with ucf
+ d/rsyslog.postinst: Adapt script to use ucf for Ubuntu's config files
+ debian/control: Add Depends for ucf
- debian/rsyslog.conf:
+ enable $RepeatedMsgReduction to avoid bloating the syslog file.
+ enable $KLogPermitNonKernelFacility for non-kernel klog messages
+ Run as syslog:syslog, set $FileOwner to syslog
+ Remove rules moved to 50-default.conf
- Add AppArmor profile, enabled by default, with support for
AppArmor configuration snippets:
+ d/rsyslog.install: install apparmor rule
+ d/rsyslog.postinst: remove disabling of apparmor on upgrades if
we are upgrading from a version older than $now.
+ d/rules: use dh_apparmor to install profile before rsyslog is started
+ d/control: suggests apparmor (>= 2.3), Build-Depends on
dh-apparmor
+ d/rsyslog.dirs: install /etc/apparmor.d/rsyslog.d
+ d/usr.sbin.rsyslogd apparmor profile for rsyslogd
+ d/{apparmor/rsyslog-mysql,rsyslog-mysql.install}: add apparmor
profile for mysql plugin
+ d/{apparmor/rsyslog-pgsql,rsyslog-pgsql.install}: add apparmor
profile for postgresql plugin
+ d/{apparmor/rsyslog-gnutls.apparmor,rsyslog-gnutls.install}: add
apparmor profile for the gnutls plugin
+ d/{apparmor/rsyslog-openssl.apparmor,rsyslog-gnutls.install}: add
apparmor profile for the openssl plugin
+ New script to reload apparmor profile:
- d/rsyslog.service: reload apparmor profile in ExecStartPre and
set StandardError to journal so we can see errors from the
script
- d/rsyslog.install: install reload-apparmor-profile
- d/reload-apparmor-profile: script to reload the
rsyslogd apparmor profile
+ d/NEWS: add info about apparmor changes in the Ubuntu packaging
+ d/rsyslog.docs, d/README.apparmor: explains how the dynamic
component of the rsyslog apparmor profile is applied
+ d/README.apparmor.rsyslog.d, d/rsyslog.install: install a specific
README file in the apparmor include directory for rsyslog
- d/rules: Fix LDFLAGS to avoid segfault on receipt of first message
- Drop [mm|pm]normalize modules, depending on liblognorm from universe.
+ d/rules: drop --enable-mmnormalize & --enable-pmnormalize
+ d/rsyslog.install: remove mmnormalize
- run as user syslog
+ d/rsyslog.postinst: fix ownership of /var/spool/rsyslog.
+ d/rsyslog.postinst: Create syslog user and add it to adm group
+ d/rsyslog.postinst: Adapt privileges for /var/log
+ debian/control: Add Depends for adduser
- d/dmesg.service, d/rsyslog.install: provide /var/log/dmesg.log as
non log-rotated log for boot-time kernel messages.
- debian/clean: Delete some files left over by the test suite
- Add DEP8 tests (LP #1906333): + d/t/control, d/t/simple-logger:
simple logger test
+ d/t/utils: common function(s)
+ d/t/control, d/t/simple-mysql: DEP8 test using rsyslog with a MySQL server
+ d/t/control, d/t/simple-pgsql: DEP8 test using rsyslog with a PostgreSQL server
+ d/t/apparmor-include-mechanism: DEP8 test for the rsyslog.d include mechanism used by the rsyslog apparmor profile
+ ubuntu: update debian/rsyslog.logcheck.ignore.server
+ Amend list of expected messages d/rsyslog.logcheck.ignore.server
to fix6 armhf autopkgtest (LP #2028935)
+ ubuntu: add CAP_MAC_ADMIN, CAP_SETUID, CAP_SETGID
+ ubuntu: adjust sandboxing
+ d/p/omusrmsg-bugfix-potential-double-free-which-can-caus.patch
* New changes
+ d/p/plugins-FromHost-must-be-63-characters-long.patch
rsyslog (8.2312.0-3) unstable; urgency=medium
* Drop unused systemd Build-Depends.
Unfortunately, we can't run the journal related tests during build as
there typically is no journald available in the build environment. So
the systemd Build-Depends is not actually needed.
Date: Fri, 12 Jan 2024 13:27:29 +0100
Changed-By: Heinrich Schuchardt <heinrich.schuchardt at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Nick Rosbrook <nick.rosbrook at canonical.com>
https://launchpad.net/ubuntu/+source/rsyslog/8.2312.0-3ubuntu1
-------------- next part --------------
Format: 1.8
Date: Fri, 12 Jan 2024 13:27:29 +0100
Source: rsyslog
Built-For-Profiles: noudeb
Architecture: source
Version: 8.2312.0-3ubuntu1
Distribution: noble
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Heinrich Schuchardt <heinrich.schuchardt at canonical.com>
Launchpad-Bugs-Fixed: 2045033
Changes:
rsyslog (8.2312.0-3ubuntu1) noble; urgency=medium
.
Merge with Debian unstable (LP: #2045033). Remaining changes:
- d/00rsyslog.conf, d/rsyslog.postinst, d/rsyslog.install: Install
tmpfiles.d snippet to ensure that the syslog group can write into
/var/log/.
- debian/50-default.conf: set of default rules for syslog
+ debian/50-default.conf: separated default rules
+ d/rsyslog.install: install default rules
+ d/rsyslog.postrm: clear default rules on purge
+ d/rsyslog.postrm: remove conf file in postrm on purge. manage with ucf
+ d/rsyslog.postinst: Adapt script to use ucf for Ubuntu's config files
+ debian/control: Add Depends for ucf
- debian/rsyslog.conf:
+ enable $RepeatedMsgReduction to avoid bloating the syslog file.
+ enable $KLogPermitNonKernelFacility for non-kernel klog messages
+ Run as syslog:syslog, set $FileOwner to syslog
+ Remove rules moved to 50-default.conf
- Add AppArmor profile, enabled by default, with support for
AppArmor configuration snippets:
+ d/rsyslog.install: install apparmor rule
+ d/rsyslog.postinst: remove disabling of apparmor on upgrades if
we are upgrading from a version older than $now.
+ d/rules: use dh_apparmor to install profile before rsyslog is started
+ d/control: suggests apparmor (>= 2.3), Build-Depends on
dh-apparmor
+ d/rsyslog.dirs: install /etc/apparmor.d/rsyslog.d
+ d/usr.sbin.rsyslogd apparmor profile for rsyslogd
+ d/{apparmor/rsyslog-mysql,rsyslog-mysql.install}: add apparmor
profile for mysql plugin
+ d/{apparmor/rsyslog-pgsql,rsyslog-pgsql.install}: add apparmor
profile for postgresql plugin
+ d/{apparmor/rsyslog-gnutls.apparmor,rsyslog-gnutls.install}: add
apparmor profile for the gnutls plugin
+ d/{apparmor/rsyslog-openssl.apparmor,rsyslog-gnutls.install}: add
apparmor profile for the openssl plugin
+ New script to reload apparmor profile:
- d/rsyslog.service: reload apparmor profile in ExecStartPre and
set StandardError to journal so we can see errors from the
script
- d/rsyslog.install: install reload-apparmor-profile
- d/reload-apparmor-profile: script to reload the
rsyslogd apparmor profile
+ d/NEWS: add info about apparmor changes in the Ubuntu packaging
+ d/rsyslog.docs, d/README.apparmor: explains how the dynamic
component of the rsyslog apparmor profile is applied
+ d/README.apparmor.rsyslog.d, d/rsyslog.install: install a specific
README file in the apparmor include directory for rsyslog
- d/rules: Fix LDFLAGS to avoid segfault on receipt of first message
- Drop [mm|pm]normalize modules, depending on liblognorm from universe.
+ d/rules: drop --enable-mmnormalize & --enable-pmnormalize
+ d/rsyslog.install: remove mmnormalize
- run as user syslog
+ d/rsyslog.postinst: fix ownership of /var/spool/rsyslog.
+ d/rsyslog.postinst: Create syslog user and add it to adm group
+ d/rsyslog.postinst: Adapt privileges for /var/log
+ debian/control: Add Depends for adduser
- d/dmesg.service, d/rsyslog.install: provide /var/log/dmesg.log as
non log-rotated log for boot-time kernel messages.
- debian/clean: Delete some files left over by the test suite
- Add DEP8 tests (LP #1906333): + d/t/control, d/t/simple-logger:
simple logger test
+ d/t/utils: common function(s)
+ d/t/control, d/t/simple-mysql: DEP8 test using rsyslog with a MySQL server
+ d/t/control, d/t/simple-pgsql: DEP8 test using rsyslog with a PostgreSQL server
+ d/t/apparmor-include-mechanism: DEP8 test for the rsyslog.d include mechanism used by the rsyslog apparmor profile
+ ubuntu: update debian/rsyslog.logcheck.ignore.server
+ Amend list of expected messages d/rsyslog.logcheck.ignore.server
to fix6 armhf autopkgtest (LP #2028935)
+ ubuntu: add CAP_MAC_ADMIN, CAP_SETUID, CAP_SETGID
+ ubuntu: adjust sandboxing
+ d/p/omusrmsg-bugfix-potential-double-free-which-can-caus.patch
.
* New changes
+ d/p/plugins-FromHost-must-be-63-characters-long.patch
.
rsyslog (8.2312.0-3) unstable; urgency=medium
.
* Drop unused systemd Build-Depends.
Unfortunately, we can't run the journal related tests during build as
there typically is no journald available in the build environment. So
the systemd Build-Depends is not actually needed.
Checksums-Sha1:
16c3db8d454fb4002214d373ac1ef07f8d851f13 3496 rsyslog_8.2312.0-3ubuntu1.dsc
f15c9d5c505dfef04047ebcf4b5b7b86433466e8 48212 rsyslog_8.2312.0-3ubuntu1.debian.tar.xz
6c2634c830692dae2a6353c560cd8a8e7e5fdbd8 9733 rsyslog_8.2312.0-3ubuntu1_source.buildinfo
Checksums-Sha256:
a1f284887e756716389d0c9a62a2f2419f8fd8f5193df5f246bc834ef1cb2888 3496 rsyslog_8.2312.0-3ubuntu1.dsc
2bf1d4b51bc58df737c5b0995964ee11397e7e12b0939309f36bbe41af64f88e 48212 rsyslog_8.2312.0-3ubuntu1.debian.tar.xz
a4574bad35ae1949a697296b1b1a7fc7fb93c22211431a2e1e16b44a4851fba4 9733 rsyslog_8.2312.0-3ubuntu1_source.buildinfo
Files:
445f52bbf367c4e04e5d070eb10f95e3 3496 admin optional rsyslog_8.2312.0-3ubuntu1.dsc
18c5f5f801cd973ab534249d46066c39 48212 admin optional rsyslog_8.2312.0-3ubuntu1.debian.tar.xz
212bb65303d6d4b22c5d50b23453f4a7 9733 admin optional rsyslog_8.2312.0-3ubuntu1_source.buildinfo
Original-Maintainer: Michael Biebl <biebl at debian.org>
Vcs-Git: https://git.launchpad.net/~xypron/ubuntu/+source/rsyslog
Vcs-Git-Commit: 96f77e6c77817b97792bfecb8ffd2a1a98547688
Vcs-Git-Ref: refs/heads/merge-lp2045033-noble-8.2312.0-3
More information about the noble-changes
mailing list