d6e7d92d82
Fix CVE-2022-1348: A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the state file does not exist, it is created with world-readable permission, allowing an unprivileged user to lock the state file, stopping any rotation. This flaw affects logrotate versions before 3.20. https://github.com/logrotate/logrotate/blob/3.20.1/ChangeLog.md Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
38 lines
1.2 KiB
Makefile
38 lines
1.2 KiB
Makefile
################################################################################
|
|
#
|
|
# logrotate
|
|
#
|
|
################################################################################
|
|
|
|
LOGROTATE_VERSION = 3.20.1
|
|
LOGROTATE_SOURCE = logrotate-$(LOGROTATE_VERSION).tar.xz
|
|
LOGROTATE_SITE = https://github.com/logrotate/logrotate/releases/download/$(LOGROTATE_VERSION)
|
|
LOGROTATE_LICENSE = GPL-2.0+
|
|
LOGROTATE_LICENSE_FILES = COPYING
|
|
LOGROTATE_CPE_ID_VENDOR = logrotate_project
|
|
LOGROTATE_DEPENDENCIES = popt host-pkgconf
|
|
LOGROTATE_SELINUX_MODULES = logrotate
|
|
LOGROTATE_CONF_ENV = LIBS="`$(PKG_CONFIG_HOST_BINARY) --libs popt`"
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBSELINUX),y)
|
|
LOGROTATE_CONF_OPTS += --with-selinux
|
|
LOGROTATE_DEPENDENCIES += libselinux
|
|
else
|
|
LOGROTATE_CONF_OPTS += --without-selinux
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_ACL),y)
|
|
LOGROTATE_DEPENDENCIES += acl
|
|
LOGROTATE_CONF_OPTS += --with-acl
|
|
else
|
|
LOGROTATE_CONF_OPTS += --without-acl
|
|
endif
|
|
|
|
define LOGROTATE_INSTALL_TARGET_CONF
|
|
$(INSTALL) -m 0644 package/logrotate/logrotate.conf $(TARGET_DIR)/etc/logrotate.conf
|
|
$(INSTALL) -d -m 0755 $(TARGET_DIR)/etc/logrotate.d
|
|
endef
|
|
LOGROTATE_POST_INSTALL_TARGET_HOOKS += LOGROTATE_INSTALL_TARGET_CONF
|
|
|
|
$(eval $(autotools-package))
|