Change for rsyslog

References https://github.com/MISP/misp-docker/pull/211#issuecomment-2593188623

Issue to track change proposal. @ostefano which config file is best to use to store the default settings (item 3 & 4)?

1. In Dockerfile: Add COPY rsyslog file /etc/rsyslog.d/40-misp.conf

# Enable slash in program names
global(parser.PermitSlashInProgramname="on")

if ($programname == '/var/www/MISP/app/tmp/logs/' or $programname == 'mispsyslog') then {
    action(type="omfile" file="/var/www/MISP/app/tmp/logs/mispsyslog.log" fileOwner="root" fileGroup="root" fileCreateMode="0644")
    & stop
}

2. In Dockerfile: Add COPY logrotate file /etc/logrotate.d/misp

/var/www/MISP/app/tmp/logs/mispsyslog.log 
{
    su root root
    rotate 8
    dateext
    missingok
    notifempty
    compress
    weekly
    size 50M
    maxsize 500M
    copytruncate
}

3. Set MISP syslog identifier (Security.syslog_ident=mispsyslog)
   • In core/files/etc/misp-docker/critical.defaults.json or core/files/etc/misp-docker/minimum_config.envars.json?
4. Enable MISP syslog (Security.syslog_ident=true)
   • In core/files/etc/misp-docker/critical.defaults.json or core/files/etc/misp-docker/minimum_config.envars.json?
5. Add a paragraph in README.md