Commit graph

78067 commits

Author SHA1 Message Date
Robin Gloster 3477e662e6 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-02-27 00:08:08 +00:00
Arseniy Seroka 766ad682f1 Merge pull request #13471 from Profpatsch/networkmanager-link-local
networkmanager: fix link-local ip addresses
2016-02-27 02:55:31 +03:00
Eelco Dolstra 6d111b353f Make explicit that maintainers should use a real name 2016-02-27 00:18:07 +01:00
zimbatm 7feaf55b7e Merge pull request #11314 from anderspapitto/flamegraph
FlameGraph: init at 182b24fb
2016-02-26 23:16:27 +00:00
zimbatm 4ecb1ce679 Merge pull request #11274 from robgssp/ldap
ldap-client: don't break on test failures
2016-02-26 23:13:27 +00:00
Robin Gloster b4dadff542 memcached: enable pie hardening 2016-02-26 23:13:13 +00:00
zimbatm 1f00c52880 Merge pull request #11210 from mitchty/munge-on-osx
Munge is buildable/usable on OS X/most unices
2016-02-26 23:10:53 +00:00
Robin Gloster 1a31447c4c icecast: enable pie hardening 2016-02-26 23:06:53 +00:00
Robin Gloster 8b9eccbf2d radvd: enable pie hardening 2016-02-26 23:03:00 +00:00
zimbatm 35ab3d301f Merge remote-tracking branch 'upstream/staging' 2016-02-26 22:37:04 +00:00
Tobias Geerinckx-Rice c3ed0a2494 btrfs-progs: 4.4 -> 4.4.1
Bugfix release. Changes:
https://btrfs.wiki.kernel.org/index.php/Changelog#By_version_.28btrfs-progs.29
2016-02-26 23:23:01 +01:00
zimbatm a7d34722b2 Merge pull request #13493 from zimbatm/alphabetize
Alphabetize
2016-02-26 22:16:43 +00:00
zimbatm 9f57b24b01 all-packages: alphabetize deprecated packages 2016-02-26 22:15:41 +00:00
zimbatm 07b1f78b94 lib: alphabetize things 2016-02-26 22:15:41 +00:00
zimbatm 6e5a748224 lib.platforms: alphabetize 2016-02-26 22:15:40 +00:00
zimbatm dea3279593 lib.maintainers: alphabetize 2016-02-26 22:13:58 +00:00
Arseniy Seroka c80a1baa15 Merge pull request #13486 from zimbatm/vim-default-config
vim: provide a default vimrc
2016-02-27 01:09:52 +03:00
zimbatm 951dc57716 Merge pull request #13482 from nico202/qnotero
qnotero: init at 1.0.0
2016-02-26 22:09:41 +00:00
Michael Raskin 73a9cd8aee Revert accidental revert of all-packages.nix gitlab changes during revert of revert of libreoffice update 2016-02-26 23:12:12 +01:00
zimbatm 89f0e25189 vim: provide a default vimrc
Minimal sane defaults imported from ArchLinux.

This is basically `set :nocompatible` with some other small changes.
2016-02-26 21:58:21 +00:00
Arseniy Seroka c373daff17 Merge pull request #13495 from heydojo/kernel--use-cdn
fetchurl: use kernel.org cdn by default
2016-02-27 00:54:16 +03:00
Michael Raskin a94e433936 libreoffice: 5.0.4.2 -> 5.1.0.3 (a new attempt); set XDG_DATA_DIRS for access to GSettings schemas 2016-02-26 22:58:27 +01:00
Graham Christensen 483a130f89 cpio: patch CVE-2016-2037, out of bounds write (close #13489) 2016-02-26 22:46:13 +01:00
Tony White 4806cddda3 fetchurl: use kernel.org cdn by default
- use http://cdn.kernel.org/pub/ as the default mirror
for kernel source requests.
Discovered by browsing :
 https://www.kernel.org/introducing-fastly-cdn.html
2016-02-26 21:32:00 +00:00
= 728b1ce557 qnotero: init at 1.0.0 2016-02-26 22:09:54 +01:00
Arseniy Seroka b9ab76c2b2 Merge pull request #13479 from hrdinka/add/pcsx2
pcsx2: init at 1.4.0
2016-02-26 23:56:55 +03:00
Arseniy Seroka c6788f42cc Merge pull request #13494 from gilligan/add-galen-to-all-packages
Add galen to all-packages.nix
2016-02-26 23:35:38 +03:00
Tobias Pflug 3386d73d06 Add galen to all-packages.nix 2016-02-26 21:01:41 +01:00
aszlig 54b4912566
chromium: Regenerate sources.nix with new updater
No changes in functionality, but to make future source updates a bit
easier on the eyes when viewing the diff.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-02-26 20:55:17 +01:00
aszlig 28b289efa6
chromium: Refactor updater entirely in Nix
The update.sh shell script now is only a call to nix-build, which does
all the hard work of updating the Chromium source channels and the
plugins. It results in a store path with the new sources.nix that
replaces the already existing sources.nix.

Along the way, this has led to a quite massive workaround, which abuses
MD5 collisions to detect whether an URL is existing, because something
like builtins.tryEval (builtins.fetchurl url) unfortunately doesn't
work. Further explanations and implementation details are documented in
the actual implementation.

The drawback of this is that we don't have nice status messages anymore,
but on the upside we have a more robust generation of the sources.nix
file, which now also should work properly on missing upstream
sources/binaries.

This also makes it much easier to implement fetching non-GNU/Linux
versions of Chromium and we have all values from omahaproxy available as
an attribute set (see the csv2nix and channels attributes in the update
attribute).

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-02-26 20:55:17 +01:00
Jude Taylor f6c3b13c7c ghcjs: pull in ghcjsi branch 2016-02-26 11:27:47 -08:00
zimbatm 26b59efa8a Merge pull request #13491 from grahamc/patch-1
go-1.6: remove the cacert 1.5 patch
2016-02-26 18:58:59 +00:00
Franz Pletz 082cd3edd3 Merge pull request #13473 from grahamc/libssh2-1.7.0
libssh2: 1.6.0 -> 1.7.0
2016-02-26 19:34:54 +01:00
Graham Christensen 8132a5ae76 go-1.6: remove the cacert 1.5 patch
Removed in 58dbaf69b7
2016-02-26 12:32:33 -06:00
zimbatm 2c7e5a6d8e Merge pull request #13434 from spacefrogg/oath-module
config.security.oath: new module
2016-02-26 18:06:28 +00:00
zimbatm c183117aee Merge pull request #13441 from gilligan/add-galen-package
galen init at 2.2.1
2016-02-26 18:05:40 +00:00
zimbatm 8b4edf10cf Merge pull request #13144 from zimbatm/go-ssl-cleanup
go: remove ssl certs patches
2016-02-26 18:00:44 +00:00
zimbatm accc1f1484 go: 1.4: disable failing test in sandbox 2016-02-26 18:00:11 +00:00
zimbatm 58dbaf69b7 go: remove ssl certs patches
Those are not needed since we now use a standard location to store our
bundles.

See bfebc7342e
2016-02-26 17:58:58 +00:00
Robin Gloster e392824fb3 dnsmasq: enable pie hardening 2016-02-26 17:55:51 +00:00
Robin Gloster 62f65d15ca chrony: enable pie hardening 2016-02-26 17:54:46 +00:00
Robin Gloster 87e64f153b cron: enable pie hardening 2016-02-26 17:27:28 +00:00
Charles Strahan 53ea7dee75 emacs: fix priority for ctags
This fixes the previous attempt (in commit 46d1dd5) to make ctags' ctags
override emacs' ctags. The higher the value of the priority attribute,
the higher the priority (see the definition of `buildEnv`).
2016-02-26 12:27:04 -05:00
Robin Gloster 631c09bbe5 checksec: clean up 2016-02-26 17:26:03 +00:00
Robin Gloster a73762200d socat: enable pie hardening 2016-02-26 16:45:49 +00:00
Robin Gloster 310fa56788 nginx: enable pie hardening 2016-02-26 16:38:26 +00:00
Robin Gloster b6279950bd openssh: enable pie hardening 2016-02-26 16:30:26 +00:00
Robin Gloster c045d2de37 signing-party: 2.1 -> 2.2 2016-02-26 16:08:51 +00:00
Robin Gloster 46b0d51636 flow: 0.18 -> 0.22 2016-02-26 15:59:24 +00:00
Robin Gloster 351173c2dd stunnel: 5.29 -> 5.30 2016-02-26 15:51:08 +00:00