[ubuntu/resolute-proposed] rsyslog 8.2512.0-1ubuntu1 (Accepted)
Simon Poirier
simon.poirier at canonical.com
Thu Dec 18 14:37:16 UTC 2025
rsyslog (8.2512.0-1ubuntu1) resolute; urgency=medium
* Merge with Debian unstable (LP: #2130067). Remaining changes:
- d/00rsyslog.conf, d/rsyslog.postinst, d/rsyslog.install: Install
tmpfiles.d snippet to ensure that the syslog group can write into
/var/log/.
- debian/50-default.conf: set of default rules for syslog
+ debian/50-default.conf: separated default rules
+ d/rsyslog.install: install default rules
+ d/rsyslog.postrm: clear default rules on purge
+ d/rsyslog.postrm: remove conf file in postrm on purge. manage with ucf
+ d/rsyslog.postinst: Adapt script to use ucf for Ubuntu's config files
+ debian/control: Add Depends for ucf
- debian/rsyslog.conf:
+ enable $RepeatedMsgReduction to avoid bloating the syslog file.
+ enable $KLogPermitNonKernelFacility for non-kernel klog messages
+ Run as syslog:syslog, set $FileOwner to syslog
+ Remove rules moved to 50-default.conf
- Add AppArmor profile, enabled by default, with support for
AppArmor configuration snippets:
+ d/rsyslog.install: install apparmor rule
+ d/rsyslog.postinst: remove disabling of apparmor on upgrades if
we are upgrading from a version older than $now.
+ d/rules: use dh_apparmor to install profile before rsyslog is started
+ d/control: suggests apparmor (>= 2.3), Build-Depends on
dh-apparmor
+ d/rsyslog.dirs: install /etc/apparmor.d/rsyslog.d
+ d/usr.sbin.rsyslogd apparmor profile for rsyslogd
+ d/{apparmor/rsyslog-mysql,rsyslog-mysql.install}: add apparmor
profile for mysql plugin
+ d/{apparmor/rsyslog-pgsql,rsyslog-pgsql.install}: add apparmor
profile for postgresql plugin
+ d/{apparmor/rsyslog-gnutls.apparmor,rsyslog-gnutls.install}: add
apparmor profile for the gnutls plugin
+ d/{apparmor/rsyslog-openssl.apparmor,rsyslog-gnutls.install}: add
apparmor profile for the openssl plugin
+ New script to reload apparmor profile:
* d/rsyslog.service: reload apparmor profile in ExecStartPre and
set StandardError to journal so we can see errors from the
script
* d/rsyslog.install: install reload-apparmor-profile
* d/reload-apparmor-profile: script to reload the
rsyslogd apparmor profile
+ d/NEWS: add info about apparmor changes in the Ubuntu packaging
+ d/rsyslog.docs, d/README.apparmor: explains how the dynamic
component of the rsyslog apparmor profile is applied
+ d/README.apparmor.rsyslog.d, d/rsyslog.install: install a specific
README file in the apparmor include directory for rsyslog
- d/rules: Fix LDFLAGS to avoid segfault on receipt of first message
- Drop [mm|pm]normalize modules, depending on liblognorm from universe.
+ d/rules: drop --enable-mmnormalize & --enable-pmnormalize
+ d/rsyslog.install: remove mmnormalize
- run as user syslog
+ d/rsyslog.postinst: fix ownership of /var/spool/rsyslog.
+ d/rsyslog.postinst: Create syslog user and add it to adm group
+ d/rsyslog.postinst: Adapt privileges for /var/log
+ debian/control: Add Depends for adduser
- d/dmesg.service, d/rsyslog.install: provide /var/log/dmesg.log as
non log-rotated log for boot-time kernel messages.
- debian/clean: Delete some files left over by the test suite
- Add DEP8 tests:
+ d/t/control, d/t/simple-logger: simple logger test
+ d/t/utils: common function(s)
+ d/t/control, d/t/simple-mysql: test with a MySQL server
+ d/t/control, d/t/simple-pgsql: test with a PostgreSQL server
+ d/t/apparmor-include-mechanism: test for the rsyslog.d include
mechanism used by the rsyslog apparmor profile
+ ubuntu: fix debian/tests/logcheck - timing
- Amend list of expected messages d/rsyslog.logcheck.ignore.server
to fix6 armhf autopkgtest (LP #2028935)
+ ubuntu: update debian/rsyslog.logcheck.ignore.server
- d/rsyslog.service: adjust sandboxing
+ add CAP_MAC_ADMIN, CAP_SETUID, CAP_SETGID
- d/usr.sbin.rsyslog: add apparmor rule to allow reading systemd sessions
(LP #2056768)
- d/usr.sbin.rsyslogd: add AppArmor rule to allow the imjournal module to
work (LP #2073628)
- d/usr.sbin.rsyslogd: add AppArmor rule to allow access to disable_ipv6
inside /proc (LP #2061726)
- d/t/logcheck: when checking the journal, only consider current boot
(LP #2100765)
- d/usr.sbin.rsyslogd: allow reading of systemd-journal's dev-log
unix socket (LP #2123821)
* New delta:
- d/t/control: add isolation-container and skip armhf for test broken
by to mysql-server being unavailable on that arch.
rsyslog (8.2512.0-1) unstable; urgency=medium
* New upstream version 8.2512.0
* Rebase patches
rsyslog (8.2510.0-5) unstable; urgency=medium
* Increase timeout of reprotest to 3h for salsa-ci
* Skip imfile-logrotate-async.sh.
This test appears to be flaky and fails rather often on
reproducible-builds.org.
See https://github.com/rsyslog/rsyslog/issues/6293
rsyslog (8.2510.0-4) unstable; urgency=medium
* Skip tests based on omfwd-lb-1target-retry-test_skeleton.sh and
omfwd-lb-1target-retry-test_skeleton-TargetFail.sh.
Those tests appear to be flaky and fail rather often on
reproducible-builds.org, especially on arm64.
See https://github.com/rsyslog/rsyslog/issues/6308 (Closes: #1094069)
rsyslog (8.2510.0-3) unstable; urgency=medium
* Run dh_auto_test with --no-parallel.
If there is a segfault in one of the tests, the core file detection
might attribute the core file to the wrong test. This can lead to
unreliable results.
See https://github.com/rsyslog/rsyslog/issues/6268
* Skip potentially buggy imrelp-tls-cfgcmd.sh.
This test triggers a segfault in tcpflood/librelp, so the root cause
might be elsewhere. While this is being investigated, skip the test for
now. (Closes: #1100103)
rsyslog (8.2510.0-2) unstable; urgency=medium
* Cherry-pick various documentation build fixes from upstream Git.
Vendor the JavaScript dependencies for better offline usage.
* (Re-)add doc-base support for rsyslog-doc
* Add lintian-overrides for no-debconf-templates to rsyslog-mysql and
rsyslog-pgsql.
Those packages use the dbconfig-common framework which provides the
debconf templates for setting up a database connection.
rsyslog (8.2510.0-1) unstable; urgency=medium
* New upstream version 8.2510.0
* Rebase patches
* Install new mmleefparse module.
This module can be used to parse log messages that follow the IBM Log
Event Extended Format (LEEF).
* Update debian/copyright
* Build rsyslog documentation and ship it in rsyslog-doc.
It superseedes the standalone rsyslog-doc source package.
Deviate from upstream and explicitly use sphinx_rtd_theme instead of the
furo theme (smaller on-disk footprint of the resulting documentation,
much faster build times).
rsyslog (8.2506.0-6) unstable; urgency=medium
* Use execute_{before,after} instead of override where possible
* Avoid excessive usage of DEB_HOST_MULTIARCH and use wildcards instead
* rsyslog-mysql and rsyslog-pgsql can be used in parallel.
So don't mark them as alternative dependencies.
* Stop setting the PYTHON interpreter path.
No longer required.
rsyslog (8.2506.0-5) unstable; urgency=medium
* Drop Recommends: mongodb-server from rsyslog-mongodb.
The mongodb(-server) package was removed from the archive in 2020 due to
licensing issues. Remove the Recommends accordingly. (Closes: #1116112)
rsyslog (8.2506.0-4) unstable; urgency=medium
[ Richard Lewis ]
* Make autopkgtest work in containers without /proc/kmesg.
If /proc/kmesg is not available (or not accessible), rsyslog will
produce some extra error messages, which the default logcheck rules
won't match, making the test fail: hide these with a local rule.
(Closes: #1110192)
[ Michael Biebl ]
* Disable missing-breaks test for salsa-ci
rsyslog (8.2506.0-3) unstable; urgency=medium
* Rename debian-branch to debian/latest as per DEP-14
* Fix cleanup of temporary files in autopkgtest
* Add support for mongo-c-driver v2
rsyslog (8.2506.0-2) unstable; urgency=medium
* Upload to unstable
rsyslog (8.2506.0-1) experimental; urgency=medium
* New upstream version 8.2506.0
* Rebase patches
Date: Wed, 17 Dec 2025 11:41:22 -0500
Changed-By: Simon Poirier <simon.poirier at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Nick Rosbrook <nick.rosbrook at canonical.com>
https://launchpad.net/ubuntu/+source/rsyslog/8.2512.0-1ubuntu1
-------------- next part --------------
Format: 1.8
Date: Wed, 17 Dec 2025 11:41:22 -0500
Source: rsyslog
Built-For-Profiles: noudeb
Architecture: source
Version: 8.2512.0-1ubuntu1
Distribution: resolute
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Simon Poirier <simon.poirier at canonical.com>
Closes: 1094069 1100103 1110192 1116112
Launchpad-Bugs-Fixed: 2130067
Changes:
rsyslog (8.2512.0-1ubuntu1) resolute; urgency=medium
.
* Merge with Debian unstable (LP: #2130067). Remaining changes:
- d/00rsyslog.conf, d/rsyslog.postinst, d/rsyslog.install: Install
tmpfiles.d snippet to ensure that the syslog group can write into
/var/log/.
- debian/50-default.conf: set of default rules for syslog
+ debian/50-default.conf: separated default rules
+ d/rsyslog.install: install default rules
+ d/rsyslog.postrm: clear default rules on purge
+ d/rsyslog.postrm: remove conf file in postrm on purge. manage with ucf
+ d/rsyslog.postinst: Adapt script to use ucf for Ubuntu's config files
+ debian/control: Add Depends for ucf
- debian/rsyslog.conf:
+ enable $RepeatedMsgReduction to avoid bloating the syslog file.
+ enable $KLogPermitNonKernelFacility for non-kernel klog messages
+ Run as syslog:syslog, set $FileOwner to syslog
+ Remove rules moved to 50-default.conf
- Add AppArmor profile, enabled by default, with support for
AppArmor configuration snippets:
+ d/rsyslog.install: install apparmor rule
+ d/rsyslog.postinst: remove disabling of apparmor on upgrades if
we are upgrading from a version older than $now.
+ d/rules: use dh_apparmor to install profile before rsyslog is started
+ d/control: suggests apparmor (>= 2.3), Build-Depends on
dh-apparmor
+ d/rsyslog.dirs: install /etc/apparmor.d/rsyslog.d
+ d/usr.sbin.rsyslogd apparmor profile for rsyslogd
+ d/{apparmor/rsyslog-mysql,rsyslog-mysql.install}: add apparmor
profile for mysql plugin
+ d/{apparmor/rsyslog-pgsql,rsyslog-pgsql.install}: add apparmor
profile for postgresql plugin
+ d/{apparmor/rsyslog-gnutls.apparmor,rsyslog-gnutls.install}: add
apparmor profile for the gnutls plugin
+ d/{apparmor/rsyslog-openssl.apparmor,rsyslog-gnutls.install}: add
apparmor profile for the openssl plugin
+ New script to reload apparmor profile:
* d/rsyslog.service: reload apparmor profile in ExecStartPre and
set StandardError to journal so we can see errors from the
script
* d/rsyslog.install: install reload-apparmor-profile
* d/reload-apparmor-profile: script to reload the
rsyslogd apparmor profile
+ d/NEWS: add info about apparmor changes in the Ubuntu packaging
+ d/rsyslog.docs, d/README.apparmor: explains how the dynamic
component of the rsyslog apparmor profile is applied
+ d/README.apparmor.rsyslog.d, d/rsyslog.install: install a specific
README file in the apparmor include directory for rsyslog
- d/rules: Fix LDFLAGS to avoid segfault on receipt of first message
- Drop [mm|pm]normalize modules, depending on liblognorm from universe.
+ d/rules: drop --enable-mmnormalize & --enable-pmnormalize
+ d/rsyslog.install: remove mmnormalize
- run as user syslog
+ d/rsyslog.postinst: fix ownership of /var/spool/rsyslog.
+ d/rsyslog.postinst: Create syslog user and add it to adm group
+ d/rsyslog.postinst: Adapt privileges for /var/log
+ debian/control: Add Depends for adduser
- d/dmesg.service, d/rsyslog.install: provide /var/log/dmesg.log as
non log-rotated log for boot-time kernel messages.
- debian/clean: Delete some files left over by the test suite
- Add DEP8 tests:
+ d/t/control, d/t/simple-logger: simple logger test
+ d/t/utils: common function(s)
+ d/t/control, d/t/simple-mysql: test with a MySQL server
+ d/t/control, d/t/simple-pgsql: test with a PostgreSQL server
+ d/t/apparmor-include-mechanism: test for the rsyslog.d include
mechanism used by the rsyslog apparmor profile
+ ubuntu: fix debian/tests/logcheck - timing
- Amend list of expected messages d/rsyslog.logcheck.ignore.server
to fix6 armhf autopkgtest (LP #2028935)
+ ubuntu: update debian/rsyslog.logcheck.ignore.server
- d/rsyslog.service: adjust sandboxing
+ add CAP_MAC_ADMIN, CAP_SETUID, CAP_SETGID
- d/usr.sbin.rsyslog: add apparmor rule to allow reading systemd sessions
(LP #2056768)
- d/usr.sbin.rsyslogd: add AppArmor rule to allow the imjournal module to
work (LP #2073628)
- d/usr.sbin.rsyslogd: add AppArmor rule to allow access to disable_ipv6
inside /proc (LP #2061726)
- d/t/logcheck: when checking the journal, only consider current boot
(LP #2100765)
- d/usr.sbin.rsyslogd: allow reading of systemd-journal's dev-log
unix socket (LP #2123821)
* New delta:
- d/t/control: add isolation-container and skip armhf for test broken
by to mysql-server being unavailable on that arch.
.
rsyslog (8.2512.0-1) unstable; urgency=medium
.
* New upstream version 8.2512.0
* Rebase patches
.
rsyslog (8.2510.0-5) unstable; urgency=medium
.
* Increase timeout of reprotest to 3h for salsa-ci
* Skip imfile-logrotate-async.sh.
This test appears to be flaky and fails rather often on
reproducible-builds.org.
See https://github.com/rsyslog/rsyslog/issues/6293
.
rsyslog (8.2510.0-4) unstable; urgency=medium
.
* Skip tests based on omfwd-lb-1target-retry-test_skeleton.sh and
omfwd-lb-1target-retry-test_skeleton-TargetFail.sh.
Those tests appear to be flaky and fail rather often on
reproducible-builds.org, especially on arm64.
See https://github.com/rsyslog/rsyslog/issues/6308 (Closes: #1094069)
.
rsyslog (8.2510.0-3) unstable; urgency=medium
.
* Run dh_auto_test with --no-parallel.
If there is a segfault in one of the tests, the core file detection
might attribute the core file to the wrong test. This can lead to
unreliable results.
See https://github.com/rsyslog/rsyslog/issues/6268
* Skip potentially buggy imrelp-tls-cfgcmd.sh.
This test triggers a segfault in tcpflood/librelp, so the root cause
might be elsewhere. While this is being investigated, skip the test for
now. (Closes: #1100103)
.
rsyslog (8.2510.0-2) unstable; urgency=medium
.
* Cherry-pick various documentation build fixes from upstream Git.
Vendor the JavaScript dependencies for better offline usage.
* (Re-)add doc-base support for rsyslog-doc
* Add lintian-overrides for no-debconf-templates to rsyslog-mysql and
rsyslog-pgsql.
Those packages use the dbconfig-common framework which provides the
debconf templates for setting up a database connection.
.
rsyslog (8.2510.0-1) unstable; urgency=medium
.
* New upstream version 8.2510.0
* Rebase patches
* Install new mmleefparse module.
This module can be used to parse log messages that follow the IBM Log
Event Extended Format (LEEF).
* Update debian/copyright
* Build rsyslog documentation and ship it in rsyslog-doc.
It superseedes the standalone rsyslog-doc source package.
Deviate from upstream and explicitly use sphinx_rtd_theme instead of the
furo theme (smaller on-disk footprint of the resulting documentation,
much faster build times).
.
rsyslog (8.2506.0-6) unstable; urgency=medium
.
* Use execute_{before,after} instead of override where possible
* Avoid excessive usage of DEB_HOST_MULTIARCH and use wildcards instead
* rsyslog-mysql and rsyslog-pgsql can be used in parallel.
So don't mark them as alternative dependencies.
* Stop setting the PYTHON interpreter path.
No longer required.
.
rsyslog (8.2506.0-5) unstable; urgency=medium
.
* Drop Recommends: mongodb-server from rsyslog-mongodb.
The mongodb(-server) package was removed from the archive in 2020 due to
licensing issues. Remove the Recommends accordingly. (Closes: #1116112)
.
rsyslog (8.2506.0-4) unstable; urgency=medium
.
[ Richard Lewis ]
* Make autopkgtest work in containers without /proc/kmesg.
If /proc/kmesg is not available (or not accessible), rsyslog will
produce some extra error messages, which the default logcheck rules
won't match, making the test fail: hide these with a local rule.
(Closes: #1110192)
.
[ Michael Biebl ]
* Disable missing-breaks test for salsa-ci
.
rsyslog (8.2506.0-3) unstable; urgency=medium
.
* Rename debian-branch to debian/latest as per DEP-14
* Fix cleanup of temporary files in autopkgtest
* Add support for mongo-c-driver v2
.
rsyslog (8.2506.0-2) unstable; urgency=medium
.
* Upload to unstable
.
rsyslog (8.2506.0-1) experimental; urgency=medium
.
* New upstream version 8.2506.0
* Rebase patches
Checksums-Sha1:
99629efece2f57b59a8e8659484dc118d63d6dd2 3838 rsyslog_8.2512.0-1ubuntu1.dsc
596b067c1a637c9fa7ff4c472b72dc0ed7bbc685 6768847 rsyslog_8.2512.0.orig.tar.gz
37373024372f0ab0fbd6a0fe948a1b75f3595740 51468 rsyslog_8.2512.0-1ubuntu1.debian.tar.xz
6ef43011a29e4ad3cb03761fe0181039dcbcfbf3 11257 rsyslog_8.2512.0-1ubuntu1_source.buildinfo
Checksums-Sha256:
7636119d70bf54a14761114dce0dda93f27ce08f38ffd0e31a842f49090d8505 3838 rsyslog_8.2512.0-1ubuntu1.dsc
93c50025d90b6c795fa350d56a3d832bfce45043ea9bd68240d9c2a9394bc629 6768847 rsyslog_8.2512.0.orig.tar.gz
e0efce844e261789615c02ddc7ef2400bf06d0f74d9c7421be76d8965d9efab2 51468 rsyslog_8.2512.0-1ubuntu1.debian.tar.xz
e9dfdf8bb92ecc9031fb0a3ff1c0a038bb0db322646eac17c4e5b3b0cd02ff71 11257 rsyslog_8.2512.0-1ubuntu1_source.buildinfo
Files:
c201daf8cb73561f153608a74df32265 3838 admin optional rsyslog_8.2512.0-1ubuntu1.dsc
744e44c74f9ecd97ee800c78dc8271d3 6768847 admin optional rsyslog_8.2512.0.orig.tar.gz
1ea28b6c16f6d1060cc8c35935c989c1 51468 admin optional rsyslog_8.2512.0-1ubuntu1.debian.tar.xz
6580050fbd3cf6ad6d538af93662f58a 11257 admin optional rsyslog_8.2512.0-1ubuntu1_source.buildinfo
Original-Maintainer: Michael Biebl <biebl at debian.org>
Vcs-Git: https://git.launchpad.net/~simpoir/ubuntu/+source/rsyslog
Vcs-Git-Commit: 803ee11cdf596e564fd68784edfce39cc27a2e98
Vcs-Git-Ref: refs/heads/merge/lp2130067
More information about the Resolute-changes
mailing list