Commit graph

5277 commits

Author SHA1 Message Date
Joachim Fasting e725c927d4
grsecurity: 4.6.4-201607192040 -> 4.6.4-201607242014 2016-07-25 09:11:28 +02:00
Shea Levy ac93e9f2c8 Linux 4.7 2016-07-24 18:30:08 -04:00
Joachim Fasting f1187c4605
gradm: ensure that udev rules are actually installed
Another regression on my part: gradm won't install the rules unless
$(DESTDIR)/etc/udev/rules.d exists.
2016-07-24 12:54:07 +02:00
Tuomas Tynkkynen 9cccf35f98 dmraid: Fix typo 2016-07-23 13:24:18 +03:00
Matthew Robbetts e434ce8f49 hostapd: 2.4 -> v2.5, fixes #17164 2016-07-23 00:56:53 +02:00
Daiderd Jordan 44c5b729b8 osx-private-sdk: Fix hash (#17185)
- use fetchFromGitHub
2016-07-23 00:54:25 +02:00
Joachim Fasting e4b7b7b028
gradm: 3.1-201507191652 -> 3.1-201607172312 2016-07-22 17:57:26 +02:00
Lluís Batlle i Rossell dd02b6f118 perf: depend on libiberty to get c++ demangling. 2016-07-21 17:27:15 +02:00
Markus Hauck 2a3fe4df43 sysdig: 0.10.0 -> 0.11.0 2016-07-20 21:27:40 +02:00
Joachim Fasting 55120ac4cb
grsecurity: 4.6.4-201607112205 -> 4.6.4-201607192040 2016-07-20 10:17:35 +02:00
Joachim Fasting c93ffb95bc
grsecurity: enable support for setting pax flags via xattrs
While useless for binaries within the Nix store, user xattrs are a convenient
alternative for setting PaX flags to executables outside of the store.

To use disable secure memory protections for a non-store file foo, do
  $ setfattr -n user.pax.flags -v em foo
2016-07-20 10:17:11 +02:00
Tuomas Tynkkynen 2fefa331e7 busybox: Fix cross build with musl 2016-07-20 02:38:10 +03:00
Graham Christensen 46655e4524 Merge pull request #17085 from j1r1k/gfxtablet-1.4
gfxtablet: git-2013-10-21 -> 1.4
2016-07-19 19:23:47 +00:00
Jiri Marsicek 4a86f9a44f gfxtablet: git-2013-10-21 -> 1.4 2016-07-19 20:47:00 +02:00
Joachim F bb6fb70d6b Merge pull request #16979 from markus1189/sysdig
sysdig: 0.9.0 -> 0.10.0
2016-07-19 12:49:05 +02:00
Franz Pletz 039f0e5cb0 firmwareLinuxNonfree: 2016-05-18 -> 2016-07-12 2016-07-19 07:55:27 +02:00
Nikolay Amiantov 28740462e7 busybox: fix static build 2016-07-19 05:20:02 +03:00
Tuomas Tynkkynen 6e0ab36de0 Merge pull request #16963 from womfoo/init/cking-kernel-tools
Init {fnotify,fork,power,smem}stat kernel tools
2016-07-16 21:15:23 +03:00
Tuomas Tynkkynen a4dfa90139 Merge pull request #17012 from womfoo/fix/lightum
lightum: fix build against systemd-230
2016-07-16 17:12:27 +03:00
Kranium Gikos Mendoza eb34cf1b6d lightum: fix build against systemd-230 2016-07-16 21:57:23 +08:00
Rickard Nilsson 8fa4dc174f Merge pull request #16899 from kragniz/lxc-2.0.3
lxc: 2.0.1 -> 2.0.3
2016-07-16 10:37:12 +02:00
Kranium Gikos Mendoza b68689ebb2 smemstat: init at 0.01.14 2016-07-16 12:09:40 +08:00
Kranium Gikos Mendoza a28dda1102 powerstat: init at 0.02.10 2016-07-16 12:09:40 +08:00
Kranium Gikos Mendoza f88f31c4f0 forkstat: init at 0.01.13 2016-07-16 12:09:32 +08:00
Markus Hauck 36c906e7c0 sysdig: 0.9.0 -> 0.10.0 2016-07-15 10:35:19 +02:00
Arseniy Seroka 658579cc57 Merge pull request #16961 from womfoo/bump/eventstat-0.03.02
eventstat: 0.02.02 -> 0.03.02
2016-07-14 22:19:33 +04:00
Kranium Gikos Mendoza b795186f2e fnotifystat: init at 0.01.14 2016-07-15 00:44:41 +08:00
Kranium Gikos Mendoza cbeb320c47 eventstat: 0.02.02 -> 0.03.02 2016-07-15 00:06:39 +08:00
Vladimír Čunát 1b5ac05845 Merge branch 'staging'
Includes security fixes in gd and libarchive.
2016-07-14 15:51:28 +02:00
Eric Sagnes c6f99a3a92 wireguard: split module and tools (#16883) 2016-07-13 21:15:11 +02:00
obadz 927a984de6 kernel: make KEXEC_FILE & KEXEC_JUMP optional to fix i686 build
cc @edolstra @dezgeg @domenkozar
2016-07-13 12:49:18 +02:00
obadz fad9a8841b ecryptfs: fix kernel bug introduced in 4.4.14
Introduced by mainline commit 2f36db7
Patch is from http://www.spinics.net/lists/stable/msg137350.html
Fixes #16766
2016-07-13 11:04:07 +02:00
Nikolay Amiantov d9aafc885f Merge branch 'early-kbd' into staging 2016-07-13 03:56:07 +03:00
Nikolay Amiantov 1848bfc92d Merge branch 'plymouth' into staging 2016-07-13 03:54:38 +03:00
Louis Taylor f51f6a36e8 lxc: 2.0.1 -> 2.0.3 2016-07-13 00:35:20 +01:00
Vladimír Čunát 40785f0dac Merge branch 'master' into staging
Hydra nixpkgs: ?compare=1282763
2016-07-12 22:00:10 +02:00
Nikolay Amiantov 6e21246dc4 plymouth: 0.9.0 -> 0.9.2
Use system-wide directories for various resources.
2016-07-12 22:22:28 +03:00
Franz Pletz dde259dfb5 linux: Add patch to fix CVE-2016-5829 (#16824)
Fixed for all available 4.x series kernels.

From CVE-2016-5829:

  Multiple heap-based buffer overflows in the hiddev_ioctl_usage function
  in drivers/hid/usbhid/hiddev.c in the Linux kernel through 4.6.3 allow
  local users to cause a denial of service or possibly have unspecified
  other impact via a crafted (1) HIDIOCGUSAGES or (2) HIDIOCSUSAGES ioctl
  call.
2016-07-12 20:56:50 +02:00
Joachim Fasting 416120e0c7
grsecurity: 4.6.3-201607070721 -> 4.6.4-201607112205 2016-07-12 15:15:09 +02:00
Tim Steinbach 47da65923b kernel: 4.6.3 -> 4.6.4 (#16875) 2016-07-12 09:54:57 +02:00
Tim Steinbach 9672c36651 conky: 1.10.1 -> 1.10.3 2016-07-11 23:20:25 +00:00
Eric Sagnes 1b41283eb3 wireguard: init at 20160708 (#16856) 2016-07-11 18:05:23 +02:00
Louis Taylor b2b8a89945 linux-testing: 4.7-rc6 -> 4.7-rc7 (#16854) 2016-07-11 17:53:41 +02:00
Eelco Dolstra ecc26d7a40 linux: Disable the old IDE subsystem
This has long been deprecated in favour of the new ATA support
(CONFIG_ATA).
2016-07-11 15:05:21 +02:00
Eelco Dolstra 7b9c493d60 linux: Enable some kernel features
This enables a few features that should be useful and safe (they're
all used by the default Ubuntu kernel config), in particular zswap,
wakelocks, kernel load address randomization, userfaultfd (useful for
QEMU), paravirtualized spinlocks and automatic process group
scheduling.

Also removes some configuration conditional on kernel versions that we
no longer support.
2016-07-11 15:04:56 +02:00
Eelco Dolstra 1cd7dbc00b linux: Bump NR_CPUS
The default limit (64) is too low for systems like EC2 x1.* instances
or Xeon Phis, so let's increase it.
2016-07-11 14:32:18 +02:00
Eelco Dolstra 8710672225 ena: Init at 20160629
This adds the Amazon Elastic Network Adapter kernel module required by
EC2 x1.* instances.
2016-07-11 14:32:18 +02:00
Franz Pletz 0f96c69026 batman-adv: 2016.1 -> 2016.2 2016-07-11 04:04:49 +02:00
Vladimír Čunát 6f07fdf469 v4l-utils: 1.6.3 -> 1.10.1
This fixes build after libjpeg(-turbo) update.
/cc maintainers: @codypoel, @viric.
2016-07-09 18:54:44 +02:00
Nikolay Amiantov da97ba359e busybox: set default keymap path 2016-07-08 20:44:01 +03:00