Commit Graph

35 Commits

Author SHA1 Message Date
alakatos
129bf49859 Rebase to 8.2310.0
Resolves: RHEL-5196
Allow setting certificates for separate connections
  Resolves: RHEL-937
Capability dropping feature can be turned off
  Resolves: RHEL-943
imjournal: new module parameter filecreatemode
  Resolves: RHEL-949
2023-11-07 13:43:13 +01:00
Patrik Koncity
8d9c0baf25 Enable CI for new MR's
Resolves: RHEL-608
2023-09-08 12:38:05 +02:00
alakatos
8c980ea7d2 Add back CAP_NET_RAW capability due to omudpspoof
resolves: rhbz#2216919
2023-07-31 13:19:10 +02:00
alakatos
2f5a1a9930 libcapng: do not try to drop capabilities that are not present
add global libcapng.default to not abort when libcapng fails
  resolves: rhbz#2216919
2023-06-27 09:23:21 +02:00
alakatos
203cd69dcb omelasticsearch: make compatible with elasticsearch>=8
add new action specific parameter esversion.major
  resolves: rhbz#2209017
2023-05-22 12:13:07 +02:00
alakatos
d6b54a3912 Fix wrong type conversion in cstrLen()
resolves: rhbz#2157805
imjournal: by default retrieves _PID from journal as PID number
  resolves: rhbz#2176397
Systemd service file hardening
  resolves: rhbz#2176403
rsyslog.conf: load imuxsock and imjournal before loading rsyslog.d
  resolves: rhbz#2165899
rsyslog is now started after the network service during boot
  resolves: rhbz#2074318
imjournal: add second fallback to the message identifier
  resolves: rhbv#2129015
2023-05-19 11:31:37 +02:00
alakatos
bf71201ec3 Add CAP_NET_RAW for initializing the libnet library for udpspoof
resolves: rhbz#2176387
Do not allow having selinux-policy < 38.1.3-1
  resolves: rhbz#2176386
2023-03-08 10:40:53 +01:00
alakatos
bd6b614291 Rebuild
resolves: rhbz#2169748
  resolves: rhbz#2158659
2023-02-22 10:40:19 +01:00
alakatos
c32bc63063 Do not preserve capabilities when changing credentials
resolves: rhbz#2169748
Remove unnecessary capability CAP_PERFMON
Add CAP_DAC_OVERRIDE to bypass file read and write permission checks
  resolves: rhbz#2158659
2023-02-17 13:30:03 +01:00
alakatos
9b1d2e0d33 Make rsyslog-relp require librelp>= 1.9.0
resolves: rhbz#2124440
Reorder logrotate parameters to work with POSIXLY_CORRECT env var
  resolves: rhbz#2124488
2023-01-09 11:33:59 +01:00
alakatos
46c836e9d7 Fix invalid memory adressing in imklog that could case abort
resolves: rhbz#2157659
2023-01-06 12:25:26 +01:00
alakatos
58d101716c Drop capabilities to only the neccessary set with libcap-ng
resolves: rhbz#2127404
2022-12-08 11:22:02 +01:00
Sergio Arroutbi
448cb11d4b Fix OpenSSL Intermediate Certificate Chains
Resolves: rhbz#2124849

Signed-off-by: Sergio Arroutbi <sarroutb@redhat.com>
2022-12-05 11:52:59 +01:00
alakatos
5e71b41f76 Address CVE-2022-24903, Heap-based overflow in TCP syslog server
resolves: rhbz#2081403
2022-05-10 21:24:40 +02:00
alakatos
650fee9311 Do not save patched doc files
resolves: rhbz#2069664
2022-04-19 15:49:38 +02:00
alakatos
37d02e387a Add deleteStateOnFileMove imfile module option
resolves: rhbz#2069664
Add inotify_rm_watch() inotify API call when object needs to be destroyed
  resolves: rhbz#2070528
Fix error handling in gtlsRecordRecv, which can cause full CPU usage
2022-04-17 14:57:51 +02:00
Sergio Arroutbi
2acae6e10c Add action.errorfile.maxsize parameter
Resolves: rhbz2064318

Signed-off-by: Sergio Arroutbi <sarroutb@redhat.com>
2022-03-15 17:10:14 +01:00
Sergio Arroutbi
ffd7b08a49 Fix bogus dates
Resolves: rhbz#2021076
2022-01-19 15:04:12 +01:00
Sergio Arroutbi
513ed47f78 Propagate prioritizeSAN on new connection accept
Resolves: rhbz#2021076
2022-01-19 13:32:15 +01:00
Sergio Arroutbi
7d34af3733 Enable mmfields
Resolves: rhbz#2027971
2022-01-18 12:57:25 +01:00
Davide Cavalca
c8778ca2f2 Split out logrotate config and dependency into a subpackage
Resolves: rhbz#1992155
2021-10-26 08:59:08 -07:00
alakatos
ab4a7972df Add required flags for branch protection
Add missing tests folder
2021-08-27 13:50:45 +02:00
alakatos
b138af8e08 Review of important potential issues detected by static analyzers
resolves: rhbz#1938863
2021-08-23 09:14:01 +02:00
alakatos
2669cb8cc6 Enable openssl
resolves: rhbz#1972058
Close dir when fsync=on
  resolves: rhbz#1972069
Do not exit when user/group can not be found
  resolves: rhbz#1990868
Remove abortOnIDResolution fail
Always use message severity when comparing with ratelimit severity
  resolves: rhbz#1990869
2021-08-18 08:47:28 +02:00
Mohan Boddu
70f03d2010 Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
Related: rhbz#1991688
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
2021-08-10 00:40:24 +00:00
alakatos
ba707456d1 Enable gating 2021-07-13 15:55:04 +02:00
Mohan Boddu
ff5ead6254 Rebuilt for RHEL 9 BETA for openssl 3.0
Related: rhbz#1971065
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
2021-06-16 03:37:44 +00:00
alakatos
76ffa62565 Port to OpenSSL 3.0 resolves: rhbz#1964823 spec file clean up 2021-06-01 09:32:15 +02:00
Mohan Boddu
d62a631273 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
2021-04-16 05:12:45 +00:00
DistroBaker
c6c0ea9035 Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/rsyslog.git#5f52eca8614c467f7e894cbe1885baad46b675bd
2021-03-19 10:30:26 +00:00
DistroBaker
38862a3be3 Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/rsyslog.git#95788bcbece726cee3adcb86cee98c0ca480cb9b
2021-02-09 10:56:38 +00:00
DistroBaker
f4e92d025f Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/rsyslog.git#595d2133f9ef69116f210d93c62ce347997bbb3a
2021-02-04 14:55:27 +00:00
DistroBaker
9429c292bc Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/rsyslog.git#b183776247b7e321c1f20e8486efead8a7ae1407
2020-11-27 07:54:27 +00:00
Troy Dawson
0add39f0d7 RHEL 9.0.0 Alpha bootstrap
The content of this branch was automatically imported from Fedora ELN
with the following as its source:
https://src.fedoraproject.org/rpms/rsyslog#bbfc785ba0e545d0218172ef47d34fc20d4d96fc
2020-10-14 21:54:46 -07:00
Release Configuration Management
30768df92d New branch setup 2020-10-09 00:26:43 +00:00