Commit graph

105245 commits

Author SHA1 Message Date
Graham Christensen c7453084ef
docker: test for socket permissions 2017-04-03 09:05:41 -04:00
Alexey Shmalko fa4fe71105
docker: fix socket permissions
Docker socket is world writable. This means any user on the system is
able to invoke docker command. (Which is equal to having a root access
to the machine.)

This commit makes socket group-writable and owned by docker group.

Inspired by
https://github.com/docker/docker/blob/master/contrib/init/systemd/docker.socket
2017-04-03 09:05:37 -04:00
Florent Becker 3699a545fd pijul: 0.3.3 -> 0.4.1 2017-04-03 15:04:04 +02:00
Florent Becker 88bfe51f92 update rust packages 2017-04-03 15:03:53 +02:00
Tim Steinbach a29d0df28c
linux: 4.11-rc4 -> 4.11-rc5 2017-04-03 09:02:37 -04:00
Thomas Tuegel 5cf9cbdc17
isyncUnstable: 20161218 -> 20170329 2017-04-03 07:23:09 -05:00
Thomas Tuegel 5f8d6a56a8
ua: init at 2017-02-24 2017-04-03 07:22:48 -05:00
Peter Simons 04e3cf8005 Merge pull request #24591 from shlevy/haskell-export-2nix
haskellPackages: Export haskellSrc2nix and hackage2nix
2017-04-03 14:23:34 +02:00
Shea Levy 1feca4cae3 haskellPackages: Export haskellSrc2nix and hackage2nix
Allows using a different haskell package set to generate the nix
expressions (during eval time) than the one used to actually build the
package (at build time).
2017-04-03 08:13:07 -04:00
Jörg Thalheim e9a636648c Merge pull request #24587 from makefu/pkgs/snapraid/update-11.1
pkgs/snapraid/update 11.1
2017-04-03 11:47:03 +02:00
ndowens 969ed8832c epdfview: Fixed SRC URL; Cosmetic Change (#24568)
epdfview: Updated Debian Mirror
2017-04-03 10:43:08 +01:00
Vladimír Čunát 969849acf8
mesa: maintenance 17.0.2 -> 17.0.3 2017-04-03 11:24:50 +02:00
makefu 1a0a60482b
snapraid: 11.0 -> 11.1
build from source, not the release configure scripts already generated
2017-04-03 10:44:15 +02:00
Taahir Ahmed 438ac662aa nomacs: init at 3.4 (#24580)
* nomacs: init at 3.4

* nomacs: add gsettings for gtk open dialogs

* nomacs: use fetchurl instead of fetchFromGitHub
2017-04-03 10:28:34 +02:00
Jörg Thalheim a054f6c076 Merge pull request #24585 from utdemir/master
kt: init at 11.1.0
2017-04-03 09:33:46 +02:00
Vladimír Čunát b6036c95d0
release-small: use unar instead of unrar
It's a free (SW) alternative.  See #16868.
2017-04-03 09:09:37 +02:00
David McFarland 2c006ca805 Revert "openssl: add custom build of 1.0.2 for steam"
No longer necessary. See https://github.com/NixOS/nixpkgs/pull/23034#issuecomment-291005754

This reverts commit a50784b34e.
2017-04-03 09:04:44 +02:00
David McFarland 398823da6e Revert "steam: use custom openssl"
No longer necessary. See https://github.com/NixOS/nixpkgs/pull/23034#issuecomment-291005754

This reverts commit a120bad30c.
2017-04-03 09:04:44 +02:00
Utku Demir db6a2918b9 kt: init at 11.1.0 2017-04-03 16:10:30 +12:00
Peter Hoeg 9f34d1f19a terraform: remove 0.8.5 specific file
It is now handled by the terraform build function instead.
2017-04-03 11:59:24 +08:00
Brandon Dimcheff aac3f9a8cb astroid: 0.7 -> 0.8
Upgraded astroid to 0.8 and uses the upstream changes to properly
propagate environment without a patch.  Note that this still uses an
unsupported version of webkitgtk and thus will fail to build, but if
allow webkitgtk to install, astroid will run.
2017-04-02 23:37:24 -04:00
Anderson Torres f6ae3f62ee Merge pull request #24581 from calvertvl/update-src-1_13
src: 1.12 -> 1.13
2017-04-03 00:23:21 -03:00
Victor Calvert 53a516b198 src: 1.12 -> 1.13 2017-04-02 22:36:02 -04:00
Jörg Thalheim 49aa2483e0 Merge pull request #24543 from winniequinn/gitkraken-desktop-entry
gitkraken: add desktop entry
2017-04-02 23:50:15 +02:00
Jörg Thalheim 3e7c485e19 Merge pull request #24553 from ndowens/git-imerge
git-imerge: 0.7.0 -> 1.0.0
2017-04-02 23:39:53 +02:00
Jörg Thalheim dac0e94e85 Merge pull request #24551 from ndowens/leoeditor
leo-editor: 5.3 -> 5.5
2017-04-02 23:37:27 +02:00
Jörg Thalheim 6df9e84773 Merge pull request #24554 from ndowens/git-radar
git-radar: 0.3.2 -> 0.5
2017-04-02 23:28:52 +02:00
Jörg Thalheim a18ac4fd35 Merge pull request #24552 from ndowens/git-cola
git-cola: 2.8 -> 2.10
2017-04-02 23:26:29 +02:00
Jörg Thalheim 97d35590c9 Merge pull request #24567 from ndowens/doomseeker
doomseeker: Cosmetic cleanup
2017-04-02 23:19:40 +02:00
Jörg Thalheim 58224f9430 Merge pull request #24566 from ndowens/dmenu2
dmenu2: Cosmetic change
2017-04-02 23:18:44 +02:00
Jörg Thalheim 500818b997
ntp: 4.2.8p9 -> 4.2.8p10; fix 10 medium/4 low CVEs
http://nwtime.org/network-time-foundation-publishes-ntp-4-2-8-p10/
2017-04-02 23:06:43 +02:00
Nikolay Amiantov fda2590abb v4l_utils: 1.10.1 -> 1.12.3
Add CLI utils-only mode.
Use flags instead of null's.
Move to Qt 5.
2017-04-02 23:55:13 +03:00
Jörg Thalheim 74e2f482fe
pdfshuffler: init at unstable-2017-02-26 2017-04-02 22:37:48 +02:00
Shea Levy 3a26d09e15 initrd-ssh: Use initrd secrets for host keys 2017-04-02 16:33:37 -04:00
Shea Levy b09490a322 systemd-boot: Support initrd secrets 2017-04-02 16:33:37 -04:00
Shea Levy 59c0977300 Add facility to append secrets to the initrd 2017-04-02 16:33:37 -04:00
ndowens ff4fa6387e diff-so-fancy: 0.11.1 -> 0.11.4 (#24562) 2017-04-02 22:22:32 +02:00
Eelco Dolstra 17aab8a63e yotube-dl: 2017.03.10 -> 2017.04.02 2017-04-02 21:52:11 +02:00
Eelco Dolstra 747ad4befd mlt: Remove some -dev paths from the closure
This reduces the closure size of mlt-qt5 from 683 to 278 MiB.
2017-04-02 21:51:46 +02:00
Eelco Dolstra 6d4e6102a7 libgsf: Use separate dev output 2017-04-02 21:51:46 +02:00
Ambroz Bizjak 35e0eea053 ntpd: Allow additional syscalls in seccomp filter.
Fixes issue #21136.

The problem is that the seccomp system call filter configured by ntpd did not
include some system calls that were apparently needed. For example the
program hanged in getpid just after the filter was installed:

prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0)  = 0
seccomp(SECCOMP_SET_MODE_STRICT, 1, NULL) = -1 EINVAL (Invalid argument)
seccomp(SECCOMP_SET_MODE_FILTER, 0, {len=41, filter=0x5620d7f0bd90}) = 0
getpid()                                = ?

I do not know exactly why this is a problem on NixOS only, perhaps we have getpid
caching disabled.

The fcntl and setsockopt system calls also had to be added.
2017-04-02 21:44:06 +02:00
Franz Pletz 658a532483 Merge pull request #24523 from mateon1/ipfs-update
ipfs: 0.4.6 -> 0.4.8
2017-04-02 21:34:14 +02:00
ndowens 968e6d823b finalterm-git: Cosmetic change 2017-04-02 13:25:46 -05:00
Joachim Fasting a77571399d
surf: 0.7 -> 2.0
This renders surf-webkit2 obsolete; it is now aliased to surf.
2017-04-02 20:11:44 +02:00
ndowens 3490c39f38 evopedia: Cosmetic 2017-04-02 21:11:01 +03:00
ndowens 35d23911e0 doomseeker: Cosmetic cleanup 2017-04-02 12:19:48 -05:00
ndowens 236e752e38 dmenu2: Cosmetic change 2017-04-02 12:15:02 -05:00
Vladimír Čunát 7286dfebbb
xorg xf86-input-libinput: 0.23.0 -> 0.25.0 2017-04-02 18:50:42 +02:00
Vladimír Čunát 9ceea2ff45 xorg xf86-video-amdgpu: 1.2.0 -> 1.3.0 (#24561) 2017-04-02 18:49:16 +02:00
ndowens b1c0814999 jitsi: Fixed java not found
Cosmetic change

Closes #24565
2017-04-02 16:51:08 +01:00