https://github.com/rsyslog/rsyslog/security/advisories/GHSA-ggw7-xr6h-mmr8 Fixes: CVE-2022-24903
119 lines
5.1 KiB
Nix
119 lines
5.1 KiB
Nix
{ lib, stdenv, fetchurl, pkg-config, autoreconfHook, libestr, json_c, zlib, docutils, fastJson
|
|
, libkrb5 ? null, systemd ? null, jemalloc ? null, libmysqlclient ? null, postgresql ? null
|
|
, libdbi ? null, net-snmp ? null, libuuid ? null, curl ? null, gnutls ? null
|
|
, libgcrypt ? null, liblognorm ? null, openssl ? null, librelp ? null, libksi ? null
|
|
, liblogging ? null, libnet ? null, hadoop ? null, rdkafka ? null
|
|
, libmongo-client ? null, czmq ? null, rabbitmq-c ? null, hiredis ? null, mongoc ? null
|
|
, libmaxminddb ? null
|
|
, nixosTests ? null
|
|
}:
|
|
|
|
with lib;
|
|
let
|
|
mkFlag = cond: name: if cond then "--enable-${name}" else "--disable-${name}";
|
|
in
|
|
stdenv.mkDerivation rec {
|
|
pname = "rsyslog";
|
|
version = "8.2204.1";
|
|
|
|
src = fetchurl {
|
|
url = "https://www.rsyslog.com/files/download/rsyslog/${pname}-${version}.tar.gz";
|
|
sha256 = "sha256-ptcx5GrT1k9q1LGbvxv1bKR2CkSiS7loIxidwucfcCg=";
|
|
};
|
|
|
|
#patches = [ ./fix-gnutls-detection.patch ];
|
|
|
|
nativeBuildInputs = [ pkg-config autoreconfHook ];
|
|
buildInputs = [
|
|
fastJson libestr json_c zlib docutils libkrb5 jemalloc
|
|
postgresql libdbi net-snmp libuuid curl gnutls libgcrypt liblognorm openssl
|
|
librelp libksi liblogging libnet hadoop rdkafka libmongo-client czmq
|
|
rabbitmq-c hiredis mongoc libmaxminddb
|
|
] ++ lib.optional (libmysqlclient != null) libmysqlclient
|
|
++ lib.optional stdenv.isLinux systemd;
|
|
|
|
configureFlags = [
|
|
"--sysconfdir=/etc"
|
|
"--localstatedir=/var"
|
|
"--with-systemdsystemunitdir=\${out}/etc/systemd/system"
|
|
(mkFlag true "largefile")
|
|
(mkFlag true "regexp")
|
|
(mkFlag (libkrb5 != null) "gssapi-krb5")
|
|
(mkFlag true "klog")
|
|
(mkFlag true "kmsg")
|
|
(mkFlag (systemd != null) "imjournal")
|
|
(mkFlag true "inet")
|
|
(mkFlag (jemalloc != null) "jemalloc")
|
|
(mkFlag true "unlimited-select")
|
|
(mkFlag false "debug")
|
|
(mkFlag false "debug-symbols")
|
|
(mkFlag true "debugless")
|
|
(mkFlag false "valgrind")
|
|
(mkFlag false "diagtools")
|
|
(mkFlag true "usertools")
|
|
(mkFlag (libmysqlclient != null) "mysql")
|
|
(mkFlag (postgresql != null) "pgsql")
|
|
(mkFlag (libdbi != null) "libdbi")
|
|
(mkFlag (net-snmp != null) "snmp")
|
|
(mkFlag (libuuid != null) "uuid")
|
|
(mkFlag (curl != null) "elasticsearch")
|
|
(mkFlag (gnutls != null) "gnutls")
|
|
(mkFlag (libgcrypt != null) "libgcrypt")
|
|
(mkFlag true "rsyslogrt")
|
|
(mkFlag true "rsyslogd")
|
|
(mkFlag true "mail")
|
|
(mkFlag (liblognorm != null) "mmnormalize")
|
|
(mkFlag (libmaxminddb != null) "mmdblookup")
|
|
(mkFlag true "mmjsonparse")
|
|
(mkFlag true "mmaudit")
|
|
(mkFlag true "mmanon")
|
|
(mkFlag true "mmutf8fix")
|
|
(mkFlag true "mmcount")
|
|
(mkFlag true "mmsequence")
|
|
(mkFlag true "mmfields")
|
|
(mkFlag true "mmpstrucdata")
|
|
(mkFlag (openssl != null) "mmrfc5424addhmac")
|
|
(mkFlag (librelp != null) "relp")
|
|
(mkFlag (libksi != null) "ksi-ls12")
|
|
(mkFlag (liblogging != null) "liblogging-stdlog")
|
|
(mkFlag (liblogging != null) "rfc3195")
|
|
(mkFlag true "imfile")
|
|
(mkFlag false "imsolaris")
|
|
(mkFlag true "imptcp")
|
|
(mkFlag true "impstats")
|
|
(mkFlag true "omprog")
|
|
(mkFlag (libnet != null) "omudpspoof")
|
|
(mkFlag true "omstdout")
|
|
(mkFlag (systemd != null) "omjournal")
|
|
(mkFlag true "pmlastmsg")
|
|
(mkFlag true "pmcisconames")
|
|
(mkFlag true "pmciscoios")
|
|
(mkFlag true "pmaixforwardedfrom")
|
|
(mkFlag true "pmsnare")
|
|
(mkFlag true "omruleset")
|
|
(mkFlag true "omuxsock")
|
|
(mkFlag true "mmsnmptrapd")
|
|
(mkFlag (hadoop != null) "omhdfs")
|
|
(mkFlag (rdkafka != null) "omkafka")
|
|
(mkFlag (libmongo-client != null) "ommongodb")
|
|
(mkFlag (czmq != null) "imczmq")
|
|
(mkFlag (czmq != null) "omczmq")
|
|
(mkFlag (rabbitmq-c != null) "omrabbitmq")
|
|
(mkFlag (hiredis != null) "omhiredis")
|
|
(mkFlag (curl != null) "omhttpfs")
|
|
(mkFlag true "generate-man-pages")
|
|
];
|
|
|
|
passthru.tests = {
|
|
nixos-rsyslogd = nixosTests.rsyslogd;
|
|
};
|
|
|
|
meta = {
|
|
homepage = "https://www.rsyslog.com/";
|
|
description = "Enhanced syslog implementation";
|
|
changelog = "https://raw.githubusercontent.com/rsyslog/rsyslog/v${version}/ChangeLog";
|
|
license = licenses.gpl3;
|
|
platforms = platforms.linux;
|
|
};
|
|
}
|