head 1.1; access; symbols; locks; strict; comment @# @; 1.1 date 2026.09.06.18.44.01; author bsiegert; state Exp; branches; next ; commitid TNp9CVbeVgbBMAUG; desc @@ 1.1 log @augeas: install lenses, fix CVE-2025-2588 Make augeas install all the lenses so it is actually usable. Also fix a security issue which is not in a release yet. From Showta Ishizaki in PR pkg/60656. @ text @$NetBSD$ Add the /usr/local paths, which are missing from three filters. On the BSDs rsyslog is configured under /usr/local/etc, as software the system did not ship itself. Dovecot, Nginx, Php, Postfix, Puppet, Sudoers and Systemd already carry their /usr/local counterpart; Rsyslog does not. Sent upstream as hercules-team/augeas#888; this is that diff. --- lenses/rsyslog.aug.orig +++ lenses/rsyslog.aug @@@@ -93,6 +93,8 @@@@ let lns = entries . ( program | hostname )* let filter = incl "/etc/rsyslog.conf" . incl "/etc/rsyslog.d/*" + . incl "/usr/local/etc/rsyslog.conf" + . incl "/usr/local/etc/rsyslog.d/*" . Util.stdexcl let xfm = transform lns filter @