<div dir="ltr">syslog-ng is not xinetd-able though. we can use systemd socket activation at least for unix domain sockets.<br></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr">-- <br>Bazsi<br></div></div></div>
<br><div class="gmail_quote">On Thu, Feb 15, 2018 at 3:35 PM, Czanik, Péter <span dir="ltr"><<a href="mailto:peter.czanik@balabit.com" target="_blank">peter.czanik@balabit.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div>OK. Thank you for the feedback! In this case I'll add the necessary ifdefs to the spec files. So support for tcp wrappers will disappear only where it is gone from the base system, like Fedora 28+. And as Fedora is upstream for RHEL, I suspect that the next major version will also miss support for tcp wrappers.<br><br></div>(this is the first time in about 20 years that somebody not just knows what tcp wrappers are but even uses them...)<br><br></div>Bye,<br></div><div class="gmail_extra"><span class=""><br clear="all"><div><div class="m_7735807697223123004gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div>Peter Czanik (CzP) <<a href="mailto:peter.czanik@balabit.com" target="_blank">peter.czanik@balabit.com</a>><br>Balabit / syslog-ng upstream<br><a href="https://syslog-ng.com/blog/author/peterczanik/" target="_blank">https://syslog-ng.com/blog/<wbr>author/peterczanik/</a><br><a href="https://twitter.com/PCzanik" target="_blank">https://twitter.com/PCzanik</a></div></div></div></div></div></div>
<br></span><div><div class="h5"><div class="gmail_quote">On Thu, Feb 15, 2018 at 2:07 PM, Declan White <span dir="ltr"><<a href="mailto:declanw@is.bbc.co.uk" target="_blank">declanw@is.bbc.co.uk</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">For what it's worth, we still use tcp wrappers here because the people who look after OS-dependant packet ACLs aren't the people who look after OS-agnostic application ACLs.<br>
<br>
But saying that, if the application has no ACL capability we give it to xinetd, and it does the tcp wrappers instead, so as long as syslog-ng is xinetd-able there isn't a problem.<br>
<br>
- Declan<br>
<div><div class="m_7735807697223123004h5"><br>
On Thu, Feb 15, 2018 at 08:25:00AM +0100, Czanik, P?ter wrote:<br>
> Hi,<br>
><br>
> I'm running a poll about tcp wrappers on twitter:<br>
> <a href="https://twitter.com/PCzanik/status/961985140128911361" rel="noreferrer" target="_blank">https://twitter.com/PCzanik/st<wbr>atus/961985140128911361</a> but feedback is also<br>
> very welcome here:<br>
><br>
> Is there anybody still using tcp wrappers support built into syslog-ng on<br>
> Fedora / RHEL / CentOS? Fedora rawhide removed support for tcp wrappers,<br>
> and if nobody opposes I'd remove it from the rest of my pacages as well to<br>
> keep packaging simple.<br>
><br>
> Some background info for those who don't even know what I'm talking about:<br>
> <a href="https://fedoraproject.org/wiki/Changes/Deprecate_TCP_wrappers" rel="noreferrer" target="_blank">https://fedoraproject.org/wiki<wbr>/Changes/Deprecate_TCP_wrapper<wbr>s</a><br>
><br>
> (In short: it's really archaic stuff I last time used in 1995... :) )<br>
><br>
> Bye,<br>
><br>
> Peter Czanik (CzP) <<a href="mailto:peter.czanik@balabit.com" target="_blank">peter.czanik@balabit.com</a>><br>
> Balabit / syslog-ng upstream<br>
> <a href="https://syslog-ng.com/blog/author/peterczanik/" rel="noreferrer" target="_blank">https://syslog-ng.com/blog/aut<wbr>hor/peterczanik/</a><br>
> <a href="https://twitter.com/PCzanik" rel="noreferrer" target="_blank">https://twitter.com/PCzanik</a><br>
<br>
</div></div>> ______________________________<wbr>______________________________<wbr>__________________<br>
> Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/mailm<wbr>an/listinfo/syslog-ng</a><br>
> Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/support<wbr>/documentation/?product=<wbr>syslog-ng</a><br>
> FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/sy<wbr>slog-ng-faq</a><br>
<span class="m_7735807697223123004HOEnZb"><font color="#888888"><br>
--<br>
Declan White<br>
______________________________<wbr>______________________________<wbr>__________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/mailm<wbr>an/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/support<wbr>/documentation/?product=<wbr>syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/sy<wbr>slog-ng-faq</a><br>
<br>
</font></span></blockquote></div><br></div></div></div>
<br>______________________________<wbr>______________________________<wbr>__________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/<wbr>mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/<wbr>support/documentation/?<wbr>product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/<wbr>syslog-ng-faq</a><br>
<br>
<br></blockquote></div><br></div>