[syslog-ng] tcp wrappers

[Scheidler, Balázs]

syslog-ng is not xinetd-able though. we can use systemd socket activation
at least for unix domain sockets.

-- 
Bazsi

On Thu, Feb 15, 2018 at 3:35 PM, Czanik, Péter <peter.czanik at balabit.com>
wrote:

> OK. Thank you for the feedback! In this case I'll add the necessary ifdefs
> to the spec files. So support for tcp wrappers will disappear only where it
> is gone from the base system, like Fedora 28+. And as Fedora is upstream
> for RHEL, I suspect that the next major version will also miss support for
> tcp wrappers.
>
> (this is the first time in about 20 years that somebody not just knows
> what tcp wrappers are but even uses them...)
>
> Bye,
>
> Peter Czanik (CzP) <peter.czanik at balabit.com>
> Balabit / syslog-ng upstream
> https://syslog-ng.com/blog/author/peterczanik/
> https://twitter.com/PCzanik
>
> On Thu, Feb 15, 2018 at 2:07 PM, Declan White <declanw at is.bbc.co.uk>
> wrote:
>
>> For what it's worth, we still use tcp wrappers here because the people
>> who look after OS-dependant packet ACLs aren't the people who look after
>> OS-agnostic application ACLs.
>>
>> But saying that, if the application has no ACL capability we give it to
>> xinetd, and it does the tcp wrappers instead, so as long as syslog-ng is
>> xinetd-able there isn't a problem.
>>
>> - Declan
>>
>> On Thu, Feb 15, 2018 at 08:25:00AM +0100, Czanik, P?ter wrote:
>> > Hi,
>> >
>> > I'm running a poll about tcp wrappers on twitter:
>> > https://twitter.com/PCzanik/status/961985140128911361 but feedback is
>> also
>> > very welcome here:
>> >
>> > Is there anybody still using tcp wrappers support built into syslog-ng
>> on
>> > Fedora / RHEL / CentOS? Fedora rawhide removed support for tcp wrappers,
>> > and if nobody opposes I'd remove it from the rest of my pacages as well
>> to
>> > keep packaging simple.
>> >
>> > Some background info for those who don't even know what I'm talking
>> about:
>> > https://fedoraproject.org/wiki/Changes/Deprecate_TCP_wrappers
>> >
>> > (In short: it's really archaic stuff I last time used in 1995... :) )
>> >
>> > Bye,
>> >
>> > Peter Czanik (CzP) <peter.czanik at balabit.com>
>> > Balabit / syslog-ng upstream
>> > https://syslog-ng.com/blog/author/peterczanik/
>> > https://twitter.com/PCzanik
>>
>> > ____________________________________________________________
>> __________________
>> > Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
>> > Documentation: http://www.balabit.com/support/documentation/?product=
>> syslog-ng
>> > FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>>
>> --
>> Declan White
>> ____________________________________________________________
>> __________________
>> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
>> Documentation: http://www.balabit.com/support/documentation/?product=
>> syslog-ng
>> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>>
>>
>
> ____________________________________________________________
> __________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?
> product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20180215/a8a2355f/attachment.html>