summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* preparing for 4.1.3 releasev4.1.3Rainer Gerhards2008-12-165-7/+9
|
* Merge branch 'beta'Rainer Gerhards2008-12-102-3/+20
|\
| * some legacy options were not correctly processedvarmojfekoj2008-12-102-3/+8
| | | | | | | | Signed-off-by: Rainer Gerhards <rgerhards@adiscon.com>
| * Merge branch 'v3-stable' into betaRainer Gerhards2008-12-102-3/+15
| |\ | | | | | | | | | | | | Conflicts: tools/syslogd.c
| | * Merge branch 'debian_lenny' into v3-stableRainer Gerhards2008-12-102-3/+14
| | |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: ChangeLog configure.ac doc/manual.html net.h plugins/imtcp/imtcp.c plugins/imudp/imudp.c runtime/net.c runtime/rsyslog.h tcps_sess.c tcpsrv.c
| | | * some legacy options were not correctly processedvarmojfekoj2008-12-102-3/+6
| | | | | | | | | | | | | | | | Signed-off-by: Rainer Gerhards <rgerhards@adiscon.com>
| | | * backport of $AllowedSender security fixv3.18.6Rainer Gerhards2008-12-0811-54/+90
| | | | | | | | | | | | | | | | | | | | | | | | | | | | - security bugfix: $AllowedSender was not honored, all senders were permitted instead (see http://www.rsyslog.com/Article322.phtml) (backport from v3-stable, v3.20.9) - minor bugfix: dual close() call on tcp session closure
| | * | doc bugfix: v3-compatiblity document had typo in config directiveRainer Gerhards2008-12-052-3/+5
| | | | | | | | | | | | | | | | thanks to Andrej for reporting this
* | | | enhanced imtcp, among others to handel invalid NetScreen framingRainer Gerhards2008-12-106-7/+112
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - added $InputTCPServerAddtlFrameDelimiter config directive, which enabeles to specify an additional, non-standard message delimiter for processing plain tcp syslog. This is primarily a fix for the invalid framing used in Juniper's NetScreen products. Credit to forum user Arv for suggesting this solution. - added $InputTCPServerInputName property, which enables a name to be specified that will be available during message processing in the inputname property. This is considered useful for logic that treats messages differently depending on which input received them.
* | | | resolved compile problem, e.g. on FreeBSDRainer Gerhards2008-12-082-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | I commented out some debug code that is only useful in some testing scenarios and re-enabled the old code. This solved a FreeBSD compile issue. Also, I fixed some other syntax error, which somehow went into the tree (I am still puzzled about that, especially as some have already and successfully build from that tree... anyhow ;)).
* | | | added sponsor information - thanks to BlinkMind for sponsoring $PreserveFQDNRainer Gerhards2008-12-081-0/+2
| | | |
* | | | added $PreserveFQDN config file directiveRainer Gerhards2008-12-087-3/+19
| | | | | | | | | | | | | | | | Enables to use FQDNs in sender names where the legacy default
* | | | bugfix: imudp went into an endless loop under some circumstancesRainer Gerhards2008-12-082-3/+6
| | | | | | | | | | | | | | | | | | | | (but could also leave it under some other circumstances...) Thanks to David Lang and speedfox for reporting this issue.
* | | | preparing for 4.1.2 releasev4.1.2Rainer Gerhards2008-12-052-10/+10
| | | |
* | | | doc bugfix: typo in v3 compatibility documentRainer Gerhards2008-12-052-3/+5
| | | | | | | | | | | | | | | | thanks to Andrej for reporting
* | | | fixed some compiler warningsRainer Gerhards2008-12-052-0/+3
| | | |
* | | | Merge branch 'beta'Rainer Gerhards2008-12-052-5/+44
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: ChangeLog configure.ac doc/manual.html plugins/imudp/imudp.c
| * | | Merge branch 'v3-stable' into betav3.21.9Rainer Gerhards2008-12-044-5/+38
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: ChangeLog configure.ac doc/manual.html plugins/imudp/imudp.c
| | * | security fix: imudp emitted a message when a non-permitted sender...v3.20.2Rainer Gerhards2008-12-044-5/+27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ...tried to send a message to it. This behaviour is operator-configurable. If enabled, a message was emitted each time. That way an attacker could effectively fill the disk via this facility. The message is now emitted only once in a minute (this currently is a hard-coded limit, if someone comes up with a good reason to make it configurable, we will probably do that).
* | | | Merge branch 'beta'Rainer Gerhards2008-12-0417-59/+184
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: ChangeLog configure.ac doc/manual.html doc/rsyslog_conf.html plugins/imudp/imudp.c runtime/rsyslog.h
| * | | prep for 3.21.8 release, added security advisory urlv3.21.8Rainer Gerhards2008-12-041-1/+1
| | | |
| * | | Merge branch 'v3-stable' into betaRainer Gerhards2008-12-0412-15/+112
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: ChangeLog configure.ac doc/manual.html
| | * | added proper release datev3.20.1Rainer Gerhards2008-12-041-1/+1
| | | |
| | * | bugfix: memory leaks in gtls netstream driverRainer Gerhards2008-12-033-1/+17
| | | |
| | * | bugfix: memory leak if sender was not permittedRainer Gerhards2008-12-031-6/+10
| | | |
| | * | minor: net.c did not compile if GSSAPI support was disabledRainer Gerhards2008-12-031-0/+2
| | | |
| | * | added interface function to nsd_gtls needed for ACL controlRainer Gerhards2008-12-013-2/+17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The legacy ACL system needs access to the remote sockaddr_storage data structure. This has been implemented for the ptcp driver and now follows for gtls. See recent commits for reason. We also moved up the version numbers in preparation of the release.
| | * | bugfix: $AllowedSender handled invalidly for plain TCP transportRainer Gerhards2008-11-296-4/+63
| | | |
| * | | clarified inclusion of security fix in ChangeLogRainer Gerhards2008-11-291-0/+2
| | | | | | | | | | | | | | | | | | | | This was imported from v3-stable, but it is important enough to justify a duplicate entry in ChangeLog.
| * | | Merge branch 'v3-stable' into betaRainer Gerhards2008-11-298-46/+66
| |\| | | | | | | | | | | | | | | | | | Conflicts: runtime/rsyslog.h
| | * | minor cleanupRainer Gerhards2008-11-292-1/+2
| | | |
| | * | security bugfix: $AllowedSender was not honored,Rainer Gerhards2008-11-297-43/+64
| | | | | | | | | | | | | | | | ...all senders were permitted instead
| | * | doc bugfix: propertiey-based filter modes had inconsistencyRainer Gerhards2008-11-211-3/+1
| | | |
* | | | some cleanup (forgotten...)Rainer Gerhards2008-12-031-4/+1
| | | |
* | | | bugfix: code did not compile without zlibRainer Gerhards2008-12-032-1/+8
| | | |
* | | | updated project statusRainer Gerhards2008-11-261-9/+9
| | | |
* | | | fixing issue with test suite which was not yet adapted to v4v4.1.1Rainer Gerhards2008-11-262-7/+7
| | | |
* | | | Merge branch 'beta'Rainer Gerhards2008-11-264-3/+19
|\| | | | | | | | | | | | | | | | | | | | | | | Conflicts: ChangeLog
| * | | bugfix: imklog did not compile on freeBSDRainer Gerhards2008-11-244-3/+18
| | | |
* | | | Merge branch 'droppriv'Rainer Gerhards2008-11-267-6/+157
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: doc/manual.html
| * | | | added ability to drop privilegesRainer Gerhards2008-11-267-5/+114
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Added $PrivDropToGroup, $PrivDropToUser, $PrivDropToGroupID, $PrivDropToUserID config directives to enable dropping privileges. This is an effort to provide a security enhancement. For the limits of this approach, see http://wiki.rsyslog.com/index.php/Security
| * | | | exprimental implementaiton of $PrivDropToUser directiveRainer Gerhards2008-11-191-4/+46
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ... which permits to drop root privileges. This is not a completely secure way of dropping permissions, e.g. the group permissions need to be dropped, too. Also, there are several vulnerability Windows (see code comments). Finally, at least the imklog module on linux does not work when privileges are dropped. This code may still be a valuable addition, and so I have created an experimental branch so that people can check it out.
* | | | | improved doc a bitRainer Gerhards2008-11-262-2/+9
| | | | |
* | | | | doc bugfix: property-based filter had inconsistent descriptionRainer Gerhards2008-11-211-3/+1
| | | | | | | | | | | | | | | | | | | | | | | | | Thank to Peter Matulis for pointing this out. Actually, all compare operations described exist.
* | | | | improved doc a bigRainer Gerhards2008-11-212-44/+38
|/ / / /
* | | | enhanced legacy syslog parser to detect year if part of the timestampv4.1.0Rainer Gerhards2008-11-182-0/+24
| | | | | | | | | | | | | | | | The format is based on what Cisco devices seem to emit.
* | | | Merge branch 'beta'Rainer Gerhards2008-11-182-2/+6
|\| | |
| * | | Merge branch 'v3-stable' into betaRainer Gerhards2008-11-182-2/+6
| |\| |
| | * | Merge branch 'v2-stable' into v3-stableRainer Gerhards2008-11-182-2/+6
| | |\ \ | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: ChangeLog
| | | * | bugfix: removed memory leak in ompgsqlKen2008-11-182-2/+6
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Rainer Gerhards <rgerhards@adiscon.com>
generated by cgit (git 2.34.1) at 2024-04-24 17:35:12 +0000