Commit graph

165240 commits

Author SHA1 Message Date
Tadeo Kondrak 0d99389a6d wine: add perl to buildInputs to fix winemaker 2019-01-05 18:40:59 +01:00
Jörg Thalheim 09fb07e4af
Merge pull request #52943 from ck3d/vdr-enableLirc
nixos vdr: introduce option enableLirc
2019-01-05 17:51:41 +01:00
Dmitry Kalinkin 8a7d9e6dd0 offlineimap: provide "OS-DEFAULT" CA certificates (#53268) 2019-01-05 17:38:10 +01:00
xeji 361d64de02
Merge pull request #53398 from Mic92/cryptominisat
cryptominisat: 5.0.1 -> 5.6.6
2019-01-05 17:34:50 +01:00
Jörg Thalheim 8a2389e4a1
Merge pull request #53404 from Mic92/xsslock
nixos/xss-lock: specify a default locker
2019-01-05 16:44:29 +01:00
Jörg Thalheim 2614c8a6c5
nixos/xss-lock: specify a default locker
Having a default locker is less error-prone and more convenient.
Incorrect values might leave the machine vulnerable since there is no
fallback.
2019-01-05 16:42:30 +01:00
Jörg Thalheim 37fe593d48
cryptominisat: switch to python3 2019-01-05 16:38:10 +01:00
R. RyanTM df834ee56d sysstat: 12.1.1 -> 12.1.2 (#52675)
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/sysstat/versions
2019-01-05 14:47:25 +01:00
Domen Kožar 5ec91bac2f
Merge pull request #53326 from domenkozar/elm-packaging-rehaul
Elm: automate packaging with elm2nix
2019-01-05 13:20:16 +00:00
Joachim Fasting 167578163a
nixos/hardened profile: always enable pti 2019-01-05 14:07:39 +01:00
Joachim Fasting 3f1f443125
nixos/hardened profile: slab/slub hardening
slab_nomerge may reduce surface somewhat

slub_debug is used to enable additional sanity checks and "red zones" around
allocations to detect read/writes beyond the allocated area, as well as
poisoning to overwrite free'd data.

The cost is yet more memory fragmentation ...
2019-01-05 14:07:37 +01:00
Joachim Fasting d62086e6fc
hardened-config: allow slub/slab free poisoning 2019-01-05 14:07:36 +01:00
Joachim Fasting 11840f5c70
hardened-config: explain HARDENED_USERCOPY_FALLBACK n 2019-01-05 14:07:36 +01:00
Joachim Fasting dfd77a046d
hardened-config: ensure STRICT_KERNEL_RWX
This is y in the default config, but enable it explicitly here to catch
situations where it has been disabled (explicitly or implicitly).
2019-01-05 14:07:35 +01:00
Joachim Fasting 1801aad7b8
hardened-config: clarify MODIFY_LDT_SYSCALL
This likely never worked; MODIFY_LDT_SYSCALL depends on EXPERT; enabling
EXPERT however seems to introduce quite a few changes that would need to be
properly vetted.

The version guard is unnecessary, however, as this config has been supported
since 4.3.
2019-01-05 14:07:34 +01:00
Joachim Fasting abc8ed3fca
hardened-config: clarify readonly LSM hooks config
SECURITY_WRITABLE_HOOKS is implicitly controlled by SECURITY_SELINUX_DISABLE;
explicitly unsetting results in an error because the configfile builder fails
to detect that it has in fact been unset (reporting it as an unused option).
For now, leave WRITABLE_HOOKS as an "optional" config for documentation
purposes.
2019-01-05 14:07:33 +01:00
Joachim Fasting c68e8b05f0
Revert "linux-hardened: Disable GCC_PLUGIN_RANDSTRUCT"
This reverts commit 5dda1324be.

Presumably this was done to work around build errors or something but it
works fine now.
2019-01-05 14:07:21 +01:00
Jörg Thalheim e36c93b3a0
Merge pull request #53408 from frlan/Update/Geany/1.34.1
Geany: 1.34 -> 1.34.1
2019-01-05 13:24:38 +01:00
Jörg Thalheim 9b2f0fbcdd
nixos/lirc: expose socket path via passthru 2019-01-05 13:22:39 +01:00
Michael Raskin 3b152247ea weechatScripts.weechat-matrix-bridge: 2018-05-29 -> 2018-11-19 (HTTP/2 support fix) 2019-01-05 13:21:30 +01:00
taku0 17f4d415a2
thunderbird: 60.3.3 -> 60.4.0
Picked from PR #53437.  It runs fine for me.
2019-01-05 13:09:04 +01:00
Jörg Thalheim 8e95adcb75
Merge pull request #53439 from dywedir/gpxsee
gpxsee: 6.3 -> 7.1
2019-01-05 13:08:27 +01:00
Jörg Thalheim 38fa1ed0db
Merge pull request #53392 from xzfc/xpointerbarrier
xpointerbarrier: 17.11 -> 18.06
2019-01-05 13:03:53 +01:00
Jörg Thalheim 8832292ace
Merge pull request #52932 from ejpcmac/init-elixir_1_8
elixir_1_8: init at 1.8.0-rc.1
2019-01-05 12:59:33 +01:00
Jörg Thalheim bf6aa78d0d
Merge pull request #52951 from Gerschtli/update/pdf2image
pythonPackages.pdf2image: 1.0.0 -> 1.3.1
2019-01-05 12:56:47 +01:00
Michael Raskin fbd6ddadf1
Merge pull request #53434 from tohl/master
sbcl updated, tested on nixos x86_64
2019-01-05 11:48:23 +00:00
Jörg Thalheim 4a4d1d6497
cryptominisat: 5.0.1 -> 5.6.6 2019-01-05 12:45:44 +01:00
Jörg Thalheim 69d3eb6b6f
elixir: link to compatibility table 2019-01-05 12:39:23 +01:00
Jean-Philippe Cugnet 5cefef0d12
elixir_1_3: Remove since it is not supported anymore 2019-01-05 12:34:49 +01:00
Orivej Desh 8dddd6d4a1 clang-tools: override llvm version in all-packages 2019-01-05 11:19:37 +00:00
Tobias Happ f94016eb84 pythonPackages.pdf2image: 1.0.0 -> 1.3.1 2019-01-05 10:56:50 +01:00
Vladyslav Mykhailichenko f24d62c1e9
gpxsee: 6.3 -> 7.1 2019-01-05 11:44:07 +02:00
Samuel Dionne-Riel c620278b63
Merge pull request #53435 from worldofpeace/systemd-logo
nixos/version: add LOGO to /etc/os-release
2019-01-05 00:30:21 -05:00
worldofpeace 21327795ce nixos/version: add LOGO to /etc/os-release 2019-01-05 00:03:39 -05:00
Tomas Hlavaty 2d9d6337f8 sbcl: 1.4.13 -> 1.4.15 2019-01-05 05:19:42 +01:00
John Ericson 1383670a83
Merge pull request #53029 from Ericson2314/windows-ce-arm
lib: Fix Mingw on 32-bit ARM
2019-01-04 20:27:35 -05:00
Michael Weiss e7e18206dd
fuse: 2.9.8 -> 2.9.9 2019-01-05 02:26:02 +01:00
Dmitry Kalinkin fb185ff859
Merge pull request #52835 from suhr/musescore
musescore: 2.3.2 -> 3.0
2019-01-04 20:20:34 -05:00
worldofpeace 678dda92a5 libcdr: drop boost159 compat fix 2019-01-04 19:49:05 -05:00
worldofpeace 2764297cc5 libcdr: disable werror is default
So this optional configure flag is uneeded.

See: 10211e95bb/NEWS (L5)
2019-01-04 19:49:05 -05:00
R. RyanTM d211457188 libcdr: 0.1.4 -> 0.1.5
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/libcdr/versions
2019-01-04 19:49:05 -05:00
Dmitry Kalinkin fc2a65308f
musescore: switch to QtWebEngine
Since version 3.0 it builds with QtWebEngine by default.
2019-01-04 19:43:23 -05:00
Elis Hirwing eeb35be95d gitea: 1.6.2 -> 1.6.3
Changelog: https://github.com/go-gitea/gitea/releases/tag/v1.6.3
2019-01-04 19:38:40 -05:00
R. RyanTM 487cbfc563 python37Packages.node-semver: 0.5.1 -> 0.6.1
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/python3.7-node-semver/versions
2019-01-04 17:43:19 -05:00
R. RyanTM b69d3fae73 python37Packages.django_redis: 4.9.1 -> 4.10.0
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/python3.7-django-redis/versions
2019-01-04 17:42:23 -05:00
R. RyanTM e65eb19da5 plantuml: 1.2018.13 -> 1.2018.14
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/plantuml/versions
2019-01-04 17:41:15 -05:00
R. RyanTM bb5ebed17f python37Packages.faker: 0.9.3 -> 1.0.1
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/python3.7-faker/versions
2019-01-04 17:36:39 -05:00
Joachim F 893c51bda8
Merge pull request #53369 from delroth/kernel-hardening
Re-add security features based on GCC plugins in 4.18+ hardened kernels
2019-01-04 21:49:53 +00:00
Alexey Shmalko 125befe16c
Merge pull request #52846 from clefru/fakeroot
fakeroot: Add sed dependency.
2019-01-04 23:36:13 +02:00
Pierre Bourdon 0f7ca26a48
kernel/hardened-config.nix: add STACKLEAK plugin on 4.20+ 2019-01-04 22:24:50 +01:00