new directory for arbitrary external programs needed by omprog module
8676

Rebase to 8.2310.0
5196
Allow setting certificates for separate connections
937
Capability dropping feature can be turned off
943
imjournal: new module parameter filecreatemode
949

Add rsyslog CI for new MR in c9s
608

Add back CAP_NET_RAW capability due to omudpspoof

libcapng: do not try to drop capabilities that are not present
add global libcapng.default to not abort when libcapng fails

omelasticsearch: make compatible with elasticsearch>=8
add new action specific parameter esversion.major

Fix wrong type conversion in cstrLen()
imjournal: by default retrieves _PID from journal as PID number
Systemd service file hardening
rsyslog.conf: load imuxsock and imjournal before loading rsyslog.d
rsyslog is now started after the network service during boot
imjournal: add second fallback to the message identifier

Do not allow having selinux-policy < 38.1.3-1

Add CAP_NET_RAW for initializing the libnet library for udpspoof

Rebuild

Do not preserve capabilities when changing credentials
Remove unnecessary capability CAP_PERFMON
Add CAP_DAC_OVERRIDE to bypass file read and write permission checks

Make rsyslog-relp require librelp>= 1.9.0
Reorder logrotate parameters to work with POSIXLY_CORRECT env var

Fix invalid memory adressing in imklog that could case abort

Drop capabilities to only the neccessary set with libcap-ng

Enable multiple SSL CA files

Address CVE-2022-24903, Heap-based overflow in TCP syslog server