Bug#1053898: Hardening rsyslog.service breaks debian/tests/logcheck autopkgtest

2023-10-14 Thread Richard Lewis
On Fri, 13 Oct 2023 at 20:27, Michael Biebl wrote: > It turns out that `PrivateTmp=yes` breaks the logcheck autopkgtest. i think the test tells rsyslog to write to /tmp and then calls logcheck on the output outside the unit. But the PrivateTmp=true means rsyslog is actually writing to

Bug#1053898: Hardening rsyslog.service breaks debian/tests/logcheck autopkgtest

2023-10-13 Thread Michael Biebl
Source: rsyslog Version: 8.2310.0-1 Severity: serious X-Debbugs-Cc: Richard Lewis The latest update of rsyslog enabled various systemd hardening and security features, specifically: CapabilityBoundingSet=CAP_BLOCK_SUSPEND CAP_CHOWN CAP_LEASE CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_SYS_RESOURCE