1 |
ultrabug 11/09/05 09:25:41 |
2 |
|
3 |
Modified: metadata.xml ChangeLog |
4 |
Added: rsyslog-5.8.5.ebuild |
5 |
Removed: rsyslog-5.8.1.ebuild |
6 |
Log: |
7 |
Init script handles baselayout 1 & 2, fix #373913. Version bump wrt #381637, drop old. Add optional zeromq support to rsyslog. |
8 |
|
9 |
(Portage version: 2.1.10.11/cvs/Linux x86_64) |
10 |
|
11 |
Revision Changes Path |
12 |
1.9 app-admin/rsyslog/metadata.xml |
13 |
|
14 |
file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/app-admin/rsyslog/metadata.xml?rev=1.9&view=markup |
15 |
plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/app-admin/rsyslog/metadata.xml?rev=1.9&content-type=text/plain |
16 |
diff : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/app-admin/rsyslog/metadata.xml?r1=1.8&r2=1.9 |
17 |
|
18 |
Index: metadata.xml |
19 |
=================================================================== |
20 |
RCS file: /var/cvsroot/gentoo-x86/app-admin/rsyslog/metadata.xml,v |
21 |
retrieving revision 1.8 |
22 |
retrieving revision 1.9 |
23 |
diff -u -r1.8 -r1.9 |
24 |
--- metadata.xml 30 Mar 2011 14:13:23 -0000 1.8 |
25 |
+++ metadata.xml 5 Sep 2011 09:25:41 -0000 1.9 |
26 |
@@ -13,7 +13,8 @@ |
27 |
<description>co-maintainer</description> |
28 |
</maintainer> |
29 |
<use> |
30 |
- <flag name='relp'>Add support for the Reliable Event Logging Protocol using <pkg>dev-libs/librelp</pkg></flag> |
31 |
<flag name='extras'>Add support for the UDP spoofing module (omudpspoof) using <pkg>net-libs/libnet</pkg></flag> |
32 |
+ <flag name='relp'>Add support for the Reliable Event Logging Protocol using <pkg>dev-libs/librelp</pkg></flag> |
33 |
+ <flag name='zeromq'>Add support for the ZeroMQ input and output plugins using <pkg>net-libs/zeromq</pkg></flag> |
34 |
</use> |
35 |
</pkgmetadata> |
36 |
|
37 |
|
38 |
|
39 |
1.53 app-admin/rsyslog/ChangeLog |
40 |
|
41 |
file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/app-admin/rsyslog/ChangeLog?rev=1.53&view=markup |
42 |
plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/app-admin/rsyslog/ChangeLog?rev=1.53&content-type=text/plain |
43 |
diff : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/app-admin/rsyslog/ChangeLog?r1=1.52&r2=1.53 |
44 |
|
45 |
Index: ChangeLog |
46 |
=================================================================== |
47 |
RCS file: /var/cvsroot/gentoo-x86/app-admin/rsyslog/ChangeLog,v |
48 |
retrieving revision 1.52 |
49 |
retrieving revision 1.53 |
50 |
diff -u -r1.52 -r1.53 |
51 |
--- ChangeLog 3 Aug 2011 07:45:11 -0000 1.52 |
52 |
+++ ChangeLog 5 Sep 2011 09:25:41 -0000 1.53 |
53 |
@@ -1,6 +1,14 @@ |
54 |
# ChangeLog for app-admin/rsyslog |
55 |
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2 |
56 |
-# $Header: /var/cvsroot/gentoo-x86/app-admin/rsyslog/ChangeLog,v 1.52 2011/08/03 07:45:11 ultrabug Exp $ |
57 |
+# $Header: /var/cvsroot/gentoo-x86/app-admin/rsyslog/ChangeLog,v 1.53 2011/09/05 09:25:41 ultrabug Exp $ |
58 |
+ |
59 |
+*rsyslog-5.8.5 (05 Sep 2011) |
60 |
+ |
61 |
+ 05 Sep 2011; Ultrabug <ultrabug@g.o> files/5-stable/rsyslog.initd, |
62 |
+ -rsyslog-5.8.1.ebuild, +rsyslog-5.8.5.ebuild, metadata.xml: |
63 |
+ Init script handles baselayout 1 & 2, fix #373913 thanks to Martin Dummer for |
64 |
+ reporting. Version bump wrt #381637 and drop old vulnerable version. Add |
65 |
+ optional zeromq support to rsyslog. |
66 |
|
67 |
*rsyslog-5.8.3 (03 Aug 2011) |
68 |
|
69 |
|
70 |
|
71 |
|
72 |
1.1 app-admin/rsyslog/rsyslog-5.8.5.ebuild |
73 |
|
74 |
file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/app-admin/rsyslog/rsyslog-5.8.5.ebuild?rev=1.1&view=markup |
75 |
plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/app-admin/rsyslog/rsyslog-5.8.5.ebuild?rev=1.1&content-type=text/plain |
76 |
|
77 |
Index: rsyslog-5.8.5.ebuild |
78 |
=================================================================== |
79 |
# Copyright 1999-2011 Gentoo Foundation |
80 |
# Distributed under the terms of the GNU General Public License v2 |
81 |
# $Header: /var/cvsroot/gentoo-x86/app-admin/rsyslog/rsyslog-5.8.5.ebuild,v 1.1 2011/09/05 09:25:41 ultrabug Exp $ |
82 |
|
83 |
EAPI=4 |
84 |
|
85 |
inherit autotools-utils systemd |
86 |
|
87 |
DESCRIPTION="An enhanced multi-threaded syslogd with database support and more." |
88 |
HOMEPAGE="http://www.rsyslog.com/" |
89 |
SRC_URI="http://www.rsyslog.com/files/download/${PN}/${P}.tar.gz |
90 |
zeromq? ( https://github.com/aggregateknowledge/rsyslog-zeromq/tarball/44b551abc29dd5b541884bd51b45b413855a93d8 -> ${PN}-zeromq.tar.gz )" |
91 |
|
92 |
LICENSE="GPL-3 LGPL-3" |
93 |
KEYWORDS="~amd64 ~arm ~hppa ~sparc ~x86" |
94 |
SLOT="0" |
95 |
IUSE="dbi debug doc extras gnutls kerberos mysql oracle postgres relp snmp static-libs zeromq zlib" |
96 |
|
97 |
DEPEND="dbi? ( dev-db/libdbi ) |
98 |
extras? ( net-libs/libnet ) |
99 |
gnutls? ( net-libs/gnutls ) |
100 |
kerberos? ( virtual/krb5 ) |
101 |
mysql? ( virtual/mysql ) |
102 |
postgres? ( dev-db/postgresql-base ) |
103 |
oracle? ( dev-db/oracle-instantclient-basic ) |
104 |
relp? ( >=dev-libs/librelp-0.1.3 ) |
105 |
snmp? ( net-analyzer/net-snmp ) |
106 |
zeromq? ( net-libs/zeromq ) |
107 |
zlib? ( sys-libs/zlib )" |
108 |
RDEPEND="${DEPEND}" |
109 |
|
110 |
BRANCH="5-stable" |
111 |
|
112 |
# need access to certain device nodes |
113 |
RESTRICT="test" |
114 |
|
115 |
# Maitainer note : open a bug to upstream |
116 |
# showing that building in a separate dir fails |
117 |
AUTOTOOLS_IN_SOURCE_BUILD=1 |
118 |
|
119 |
DOCS=(AUTHORS ChangeLog doc/rsyslog-example.conf) |
120 |
|
121 |
src_prepare() { |
122 |
# Maintainer notes: |
123 |
# ZeroMQ support, for now it is done by hand until upstream process bug. |
124 |
# Bugzilla : http://bugzilla.adiscon.com/show_bug.cgi?id=277 |
125 |
if use zeromq; then |
126 |
local ZEROPATH=${WORKDIR}/aggregateknowledge-rsyslog-zeromq-44b551a |
127 |
epatch ${ZEROPATH}/rsyslog-zeromq.patch |
128 |
cp -r "${ZEROPATH}/{i,o}mzeromq" "${S}/plugins" |
129 |
eautoreconf |
130 |
fi |
131 |
} |
132 |
|
133 |
src_configure() { |
134 |
# Maintainer notes: |
135 |
# * rfc3195 needs a library and development of that library |
136 |
# is suspended, so we disable it |
137 |
# * About the java GUI: |
138 |
# The maintainer says there is no real installation support |
139 |
# for the java GUI, so we disable it for now. |
140 |
local myeconfargs=( |
141 |
--disable-gui |
142 |
--disable-rfc3195 |
143 |
--enable-largefile |
144 |
--enable-unlimited-select |
145 |
--enable-imdiag |
146 |
--enable-imfile |
147 |
--enable-impstats |
148 |
--enable-imtemplate |
149 |
--enable-imptcp |
150 |
--enable-mail |
151 |
--enable-omprog |
152 |
--enable-omstdout |
153 |
--enable-omtemplate |
154 |
--enable-omdbalerting |
155 |
--enable-omuxsock |
156 |
--enable-pmlastmsg |
157 |
--enable-pmrfc3164sd |
158 |
--enable-pmcisconames |
159 |
--enable-pmaixforwardedfrom |
160 |
--enable-pmsnare |
161 |
$(use_enable extras omudpspoof) |
162 |
$(use_enable zlib) |
163 |
$(use_enable mysql) |
164 |
$(use_enable dbi libdbi) |
165 |
$(use_enable postgres pgsql) |
166 |
$(use_enable oracle oracle) |
167 |
$(use_enable gnutls) |
168 |
$(use_enable kerberos gssapi-krb5) |
169 |
$(use_enable relp) |
170 |
$(use_enable snmp) |
171 |
$(use_enable snmp mmsnmptrapd) |
172 |
$(use_enable debug) |
173 |
$(use_enable debug rtinst) |
174 |
$(use_enable debug diagtools) |
175 |
$(use_enable debug memcheck) |
176 |
$(use_enable debug valgrind) |
177 |
$(use_enable zeromq imzeromq) |
178 |
$(use_enable zeromq omzeromq) |
179 |
) |
180 |
|
181 |
systemd_to_myeconfargs |
182 |
autotools-utils_src_configure |
183 |
} |
184 |
|
185 |
src_install() { |
186 |
use doc && HTML_DOCS=(doc/) |
187 |
autotools-utils_src_install |
188 |
|
189 |
insinto /etc |
190 |
newins "${FILESDIR}/${BRANCH}/${PN}-gentoo.conf" ${PN}.conf |
191 |
newconfd "${FILESDIR}/${BRANCH}/${PN}.confd" ${PN} |
192 |
newinitd "${FILESDIR}/${BRANCH}/${PN}.initd" ${PN} |
193 |
keepdir /var/spool/${PN} |
194 |
keepdir /etc/ssl/${PN} |
195 |
keepdir /etc/${PN}.d |
196 |
|
197 |
if use mysql; then |
198 |
insinto /usr/share/doc/${PF}/scripts/mysql |
199 |
doins plugins/ommysql/{createDB.sql,contrib/delete_mysql} |
200 |
fi |
201 |
|
202 |
if use postgres; then |
203 |
insinto /usr/share/doc/${PF}/scripts/pgsql |
204 |
doins plugins/ompgsql/createDB.sql |
205 |
fi |
206 |
|
207 |
insinto /etc/logrotate.d/ |
208 |
newins "${FILESDIR}/${BRANCH}/${PN}.logrotate" ${PN} |
209 |
} |
210 |
|
211 |
pkg_postinst() { |
212 |
if use mysql || use postgres; then |
213 |
echo |
214 |
elog "Sample SQL scripts for MySQL & PostgreSQL have been installed to:" |
215 |
elog " /usr/share/doc/${PF}/scripts" |
216 |
fi |
217 |
|
218 |
if use gnutls; then |
219 |
echo |
220 |
elog "To create a default CA and certificates for your server and clients, run:" |
221 |
elog " emerge --config =${PF}" |
222 |
elog "on your logging server. You can run it several times," |
223 |
elog "once for each logging client. The client certificates will be signed" |
224 |
elog "using the CA certificate generated during the first run." |
225 |
fi |
226 |
} |
227 |
|
228 |
pkg_config() { |
229 |
if ! use gnutls ; then |
230 |
einfo "There is nothing to configure for rsyslog unless you" |
231 |
einfo "used USE=gnutls to build it." |
232 |
return 0 |
233 |
fi |
234 |
|
235 |
# Make sure the certificates directory exists |
236 |
CERTDIR="${ROOT}/etc/ssl/${PN}" |
237 |
if [ ! -d "${CERTDIR}" ]; then |
238 |
mkdir "${CERTDIR}" || die |
239 |
fi |
240 |
einfo "Your certificates will be stored in ${CERTDIR}" |
241 |
|
242 |
# Create a default CA if needed |
243 |
if [ ! -f "${CERTDIR}/${PN}_ca.cert.pem" ]; then |
244 |
einfo "No CA key and certificate found in ${CERTDIR}, creating them for you..." |
245 |
certtool --generate-privkey \ |
246 |
--outfile "${CERTDIR}/${PN}_ca.privkey.pem" &>/dev/null |
247 |
chmod 400 "${CERTDIR}/${PN}_ca.privkey.pem" |
248 |
|
249 |
cat > "${T}/${PF}.$$" <<_EOF |
250 |
cn = Portage automated CA |
251 |
ca |
252 |
cert_signing_key |
253 |
expiration_days = 3650 |
254 |
_EOF |
255 |
|
256 |
certtool --generate-self-signed \ |
257 |
--load-privkey "${CERTDIR}/${PN}_ca.privkey.pem" \ |
258 |
--outfile "${CERTDIR}/${PN}_ca.cert.pem" \ |
259 |
--template "${T}/${PF}.$$" &>/dev/null |
260 |
chmod 400 "${CERTDIR}/${PN}_ca.privkey.pem" |
261 |
|
262 |
# Create the server certificate |
263 |
echo |
264 |
einfon "Please type the Common Name of the SERVER you wish to create a certificate for: " |
265 |
read -r CN |
266 |
|
267 |
einfo "Creating private key and certificate for server ${CN}..." |
268 |
certtool --generate-privkey \ |
269 |
--outfile "${CERTDIR}/${PN}_${CN}.key.pem" &>/dev/null |
270 |
chmod 400 "${CERTDIR}/${PN}_${CN}.key.pem" |
271 |
|
272 |
cat > "${T}/${PF}.$$" <<_EOF |
273 |
cn = ${CN} |
274 |
tls_www_server |
275 |
dns_name = ${CN} |
276 |
expiration_days = 3650 |
277 |
_EOF |
278 |
|
279 |
certtool --generate-certificate \ |
280 |
--outfile "${CERTDIR}/${PN}_${CN}.cert.pem" \ |
281 |
--load-privkey "${CERTDIR}/${PN}_${CN}.key.pem" \ |
282 |
--load-ca-certificate "${CERTDIR}/${PN}_ca.cert.pem" \ |
283 |
--load-ca-privkey "${CERTDIR}/${PN}_ca.privkey.pem" \ |
284 |
--template "${T}/${PF}.$$" &>/dev/null |
285 |
chmod 400 "${CERTDIR}/${PN}_${CN}.cert.pem" |
286 |
|
287 |
else |
288 |
einfo "Found existing ${CERTDIR}/${PN}_ca.cert.pem, skipping CA and SERVER creation." |
289 |
fi |
290 |
|
291 |
# Create a client certificate |
292 |
echo |
293 |
einfon "Please type the Common Name of the CLIENT you wish to create a certificate for: " |
294 |
read -r CN |
295 |
|
296 |
einfo "Creating private key and certificate for client ${CN}..." |
297 |
certtool --generate-privkey \ |
298 |
--outfile "${CERTDIR}/${PN}_${CN}.key.pem" &>/dev/null |
299 |
chmod 400 "${CERTDIR}/${PN}_${CN}.key.pem" |
300 |
|
301 |
cat > "${T}/${PF}.$$" <<_EOF |
302 |
cn = ${CN} |
303 |
tls_www_client |
304 |
dns_name = ${CN} |
305 |
expiration_days = 3650 |
306 |
_EOF |
307 |
|
308 |
certtool --generate-certificate \ |
309 |
--outfile "${CERTDIR}/${PN}_${CN}.cert.pem" \ |
310 |
--load-privkey "${CERTDIR}/${PN}_${CN}.key.pem" \ |
311 |
--load-ca-certificate "${CERTDIR}/${PN}_ca.cert.pem" \ |
312 |
--load-ca-privkey "${CERTDIR}/${PN}_ca.privkey.pem" \ |
313 |
--template "${T}/${PF}.$$" &>/dev/null |
314 |
chmod 400 "${CERTDIR}/${PN}_${CN}.cert.pem" |
315 |
|
316 |
rm -f "${T}/${PF}.$$" |
317 |
|
318 |
echo |
319 |
einfo "Here is the documentation on how to encrypt your log traffic:" |
320 |
einfo " http://www.rsyslog.com/doc/rsyslog_tls.html" |
321 |
} |