diff options
| author |   Randy MacLeod <Randy.MacLeod@windriver.com> | 2023-03-01 16:24:26 -0800 |
|---|---|---|
| committer |   Khem Raj <raj.khem@gmail.com> | 2023-03-01 18:10:35 -0800 |
| commit | 35df0b606e1adc0db58dfe8088d0ba5cab2f3df6 (patch) | |
| tree | b74a1b7383f8601b6757ccbfa53c14ff5afeb811 /meta-oe/recipes-extended | |
| parent | 44cb4f1e121f5fb4d81399d14ccaa602e27c775b (diff) | |
| download | meta-openembedded-contrib-35df0b606e1adc0db58dfe8088d0ba5cab2f3df6.tar.gz | |
rsyslog: add disabled PACKAGECONFIG to drop capabilities
Add PACKAGECONFIG to enable dropping capabilities but leave it as disabled
to follow upstream and avoid a systemd issue described below.
rsyslog-8.2302 added a configure option to drop capabilities from
full to:
chown, dac_override, setgid, setuid, setpcap, net_bind_service,
net_admin, ipc_lock, sys_chroot, sys_admin, sys_resource, lease,
syslog, block_suspend
This works fine and passes ptests with sysvinit however
there is a bug when using systemd that breaks some tests:
https://github.com/rsyslog/rsyslog/issues/5091
Therefore only add a non-default PACKAGECONFIG option in keeping
with the rsyslog upstream.
One can install libcap-ng-bin to run pscap to see the capabilities.
Without this option the ptest result with systemd as init is:
Version | Passed | Failed | Skipped
8.2302 | 473 | 0 | 3
Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Diffstat (limited to 'meta-oe/recipes-extended')
| -rw-r--r-- | meta-oe/recipes-extended/rsyslog/rsyslog_8.2302.0.bb | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/meta-oe/recipes-extended/rsyslog/rsyslog_8.2302.0.bb b/meta-oe/recipes-extended/rsyslog/rsyslog_8.2302.0.bb index 727e231112..39d9516d0f 100644 --- a/meta-oe/recipes-extended/rsyslog/rsyslog_8.2302.0.bb +++ b/meta-oe/recipes-extended/rsyslog/rsyslog_8.2302.0.bb @@ -76,6 +76,8 @@ PACKAGECONFIG[mmjsonparse] = "--enable-mmjsonparse,--disable-mmjsonparse," PACKAGECONFIG[mysql] = "--enable-mysql,--disable-mysql,mysql5," PACKAGECONFIG[postgresql] = "--enable-pgsql,--disable-pgsql,postgresql," PACKAGECONFIG[libdbi] = "--enable-libdbi,--disable-libdbi,libdbi," +# For libcap-ng, see commit log and https://github.com/rsyslog/rsyslog/issues/5091 +PACKAGECONFIG[libcap-ng] = "--enable-libcap-ng,--disable-libcap-ng,libcap-ng," PACKAGECONFIG[mail] = "--enable-mail,--disable-mail,," PACKAGECONFIG[valgrind] = ",--without-valgrind-testbench,valgrind," PACKAGECONFIG[imhttp] = "--enable-imhttp,--disable-imhttp,civetweb," |