Source: rsyslog Version: 8.2504.0-1 Severity: serious Justification: code and/or documentation probably non-free
Our friends from Gentoo have uncovered this: https://social.treehouse.systems/@mgorny/114835815375250264 In the linked-to article, the rsyslog author admits to having used so-called “AI” over the past 24 (!) months. This means that the code and/or documentation in recent releases is very likely non-free, as it’s created by mechanically transforming existing works without honouring their licences, and without even the possibility of auditing. This makes recent releases of rsyslog not suitable for main, especially not as default syslogd implementation. I recognise that this short before the trixie release is a bad timing, but the author of rsyslog admits at having done this underhandedly hidden for the last two years, so… ---- Personally, I’ve been happy with inetutils-syslogd, and, given that many people would use systemd-journald’s features these days anyway, it inetutils-syslogd probably makes for a better choice as default syslogd implementation in Debian, forwarded to from systemd-journald on systems using that (AIUI not even by default any more). People who do rely on rsyslog can then install it from non-free after initial system setup.
