mirror of
https://github.com/rsyslog/rsyslog.git
synced 2025-12-16 09:50:40 +01:00
e6fbc692aa
new crypto provider: lmcry_ossl The new ossl crypto provider encapsulates the ability to use log encryption in the omfile module. It provides the same functionality as gcry, additionaly: * Algorithm are not hardcoded. We simply provide everything what can be fetched via the EVP_CIPHER_fetch() call. The same applies to the mode parameter. * It does not add extra dependency to a new package. Distro maintainers who are already using openssl do not need add anything in particular. By default, if rsyslog is compiled with --enable-openssl, the ossl crypto provider will also be included in both omfile and also rscryutil. * Side-channel vulnerability in libgcrypt - the Marvin Attack https://lists.gnupg.org/pipermail/gcrypt-devel/2024-March/005607.html Some might be worried about other side-channel vulnerabilities against it, like the Minerva Attack[1], and the Raccoon Attack[2], given the way they handled one of the oldest, well known, and most straightforward side-channel attacks. They did downgrade their threat model as a result of Marvin too: https://gnupg.org/documentation/security.html.
132 lines
3.0 KiB
Makefile
132 lines
3.0 KiB
Makefile
sbin_PROGRAMS =
|
|
bin_PROGRAMS =
|
|
CLEANFILES =
|
|
man1_MANS =
|
|
man_MANS = rsyslogd.8 rsyslog.conf.5
|
|
|
|
sbin_PROGRAMS += rsyslogd
|
|
rsyslogd_SOURCES = \
|
|
syslogd.c \
|
|
rsyslogd.c \
|
|
syslogd.h \
|
|
omshell.c \
|
|
omshell.h \
|
|
omusrmsg.c \
|
|
omusrmsg.h \
|
|
omfwd.c \
|
|
omfwd.h \
|
|
omfile.c \
|
|
omfile.h \
|
|
ompipe.c \
|
|
ompipe.h \
|
|
omdiscard.c \
|
|
omdiscard.h \
|
|
pmrfc5424.c \
|
|
pmrfc5424.h \
|
|
pmrfc3164.c \
|
|
pmrfc3164.h \
|
|
smtradfile.c \
|
|
smtradfile.h \
|
|
smfile.c \
|
|
smfile.h \
|
|
smfwd.c \
|
|
smfwd.h \
|
|
smtradfwd.c \
|
|
smtradfwd.h \
|
|
iminternal.c \
|
|
iminternal.h \
|
|
\
|
|
../dirty.h
|
|
rsyslogd_CPPFLAGS = $(PTHREADS_CFLAGS) $(RSRT_CFLAGS)
|
|
|
|
if ENABLE_LIBLOGGING_STDLOG
|
|
rsyslogd_CPPFLAGS += $(LIBLOGGING_STDLOG_CFLAGS)
|
|
endif
|
|
|
|
rsyslogd_CPPFLAGS += -DSD_EXPORT_SYMBOLS
|
|
|
|
# note: it looks like librsyslog.la must be explicitely given on LDDADD,
|
|
# otherwise dependencies are not properly calculated (resulting in a
|
|
# potentially incomplete build, a problem we had several times...)
|
|
rsyslogd_LDADD = ../grammar/libgrammar.la ../runtime/librsyslog.la ../compat/compat.la $(ZLIB_LIBS) $(PTHREADS_LIBS) $(RSRT_LIBS) $(SOL_LIBS) $(LIBUUID_LIBS) $(HASH_XXHASH_LIBS)
|
|
|
|
# Note: do NOT indent the if chain - it will not work!
|
|
if OS_LINUX
|
|
rsyslogd_LDFLAGS = -export-dynamic \
|
|
#-Wl,--whole-archive,$(top_builddir)/runtime/.libs/librsyslog.a,--no-whole-archive
|
|
exports_list_file =
|
|
else
|
|
if OS_APPLE
|
|
rsyslogd_LDFLAGS = -export-dynamic \
|
|
-Wl,$(top_builddir)/runtime/.libs/librsyslog.a
|
|
exports_list_file =
|
|
else
|
|
if OS_AIX
|
|
rsyslogd_LDFLAGS = -brtl -bexpall -f"aix_exports_list" -lsrc
|
|
exports_list_file = aix_exports_list
|
|
else # e.g. FreeBSD
|
|
rsyslogd_LDFLAGS = -export-dynamic
|
|
exports_list_file =
|
|
endif # if OS_AIX
|
|
endif # if OS_APPLE
|
|
endif # if OS_LINUX
|
|
|
|
EXTRA_DIST = $(man_MANS) \
|
|
rscryutil.rst \
|
|
recover_qi.pl
|
|
|
|
EXTRA_rsyslogd_DEPENDENCIES = $(exports_list_file)
|
|
|
|
if ENABLE_LIBLOGGING_STDLOG
|
|
rsyslogd_LDADD += $(LIBLOGGING_STDLOG_LIBS)
|
|
endif
|
|
|
|
if ENABLE_DIAGTOOLS
|
|
sbin_PROGRAMS += rsyslog_diag_hostname msggen
|
|
rsyslog_diag_hostname_SOURCES = gethostn.c
|
|
msggen_SOURCES = msggen.c
|
|
endif
|
|
|
|
if ENABLE_USERTOOLS
|
|
if ENABLE_OMMONGODB
|
|
bin_PROGRAMS += logctl
|
|
logctl_SOURCES = logctl.c
|
|
logctl_CPPFLAGS = $(RSRT_CFLAGS) $(PTHREADS_CFLAGS) $(LIBMONGOC_CFLAGS)
|
|
logctl_LDADD = $(LIBMONGOC_LIBS)
|
|
endif
|
|
|
|
if ENABLE_RSCRYUTIL
|
|
bin_PROGRAMS += rscryutil
|
|
rscryutil = rscryutil.c
|
|
rscryutil_CPPFLAGS = -I../runtime $(RSRT_CFLAGS)
|
|
rscryutil_LDADD =
|
|
|
|
if ENABLE_LIBGCRYPT
|
|
rscryutil_CPPFLAGS += $(LIBGCRYPT_CFLAGS)
|
|
rscryutil_LDADD += ../runtime/libgcry.la $(LIBGCRYPT_LIBS)
|
|
endif
|
|
|
|
if ENABLE_OPENSSL_CRYPTO_PROVIDER
|
|
rscryutil_CPPFLAGS += $(OPENSSL_CFLAGS)
|
|
rscryutil_LDADD += ../runtime/libossl.la $(OPENSSL_LIBS)
|
|
endif
|
|
|
|
rscryutil_LDFLAGS = \
|
|
-Wl,--whole-archive,--no-whole-archive
|
|
|
|
if ENABLE_GENERATE_MAN_PAGES
|
|
RSTMANFILE = rscryutil.rst
|
|
rscryutil.1: $(RSTMANFILE)
|
|
$(AM_V_GEN) $(RST2MAN) $(RSTMANFILE) $@
|
|
man1_MANS += rscryutil.1
|
|
CLEANFILES += rscryutil.1
|
|
EXTRA_DIST+= rscryutil.1
|
|
endif
|
|
endif
|
|
endif
|
|
|
|
aix_exports_list:
|
|
echo "$(top_builddir)/runtime/.libs/librsyslog_la-*.o" > $@
|
|
echo "$(top_builddir)/.libs/librsyslog_la-*.o" >> $@
|
|
echo "$(top_builddir)/grammar/.libs/libgrammar_la-*.o" >> $@
|