]> code.ossystems Code Review - openembedded-core.git/commit
sysklogd: do not open any network sockets by default
authorDiego Santa Cruz <Diego.SantaCruz@spinetix.com>
Thu, 25 Feb 2021 16:03:56 +0000 (17:03 +0100)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Fri, 26 Feb 2021 15:19:28 +0000 (15:19 +0000)
commit103688fd349338520c147d5bde07429951925141
treecab5792d8d3dbb24a4645229d2e6910bfc57b918
parent17ec69be55a6b7572947704c07d8693d47d7f1d1
sysklogd: do not open any network sockets by default

The default in sysklogd 2.x is to open listening network sockets,
unlike sysklogd 1.5 where the default was the opposite.

This is contrary to a "secure by default" design, so set up the
init script to pass the -ss option to prevent syslogd from opening
any network sockets. It can be overridden in /etc/default/syslogd.

Signed-off-by: Diego Santa Cruz <Diego.SantaCruz@spinetix.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-extended/sysklogd/files/sysklogd