aszlig
9bc2f77daa
nixos/tests/chromium: Improve sandbox checking.
...
We no longer need have "SUID sandbox" enabled in the chrome://sandbox
status page and we now also check for "You are adequately sandboxed." to
be absolutely sure that we're running with proper sandboxing.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2015-07-04 02:31:45 +02:00
aszlig
7e6d6e034d
chromium: Disable setuid sandbox without errors.
...
Just silencing the error will not prevent Chromium from trying to start
up the SUID sandbox anyway, thus flooding stderr with:
LaunchProcess: failed to execvp:
After digging a bit in the source code I found out that the SUID sandbox
binary is indeed used, but only for setting oom_score_adj within the
user namespace (as "root"). So let's build the sandbox binary and of
course don't set setuid bit.
These annoying error messages were originally introduced by 0aad4b7
and
I'm deeply sorry for annoying you guys out there with them.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2015-07-04 02:31:45 +02:00
aszlig
a80437e236
chromium: Remove out-of-tree sandbox derivation.
...
Since 0aad4b7
, we no longer need to have an external sandbox binary,
because the upstream implementation of the user namespace sandbox no
longer needs an external sandbox binary.
In our implementation of the user namespace sandbox, we (ab)used the
setuid sandbox to run non-setuid and set up user namespaces instead.
Because our implementation is no longer needed, we can safely drop the
external binary entirely.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2015-07-04 02:31:44 +02:00
aszlig
97ddd04ca9
chromium: Remove obsolete sandbox_userns_36.patch.
...
The file is no longer referenced since 6a8afa4
and thus can be safely
dropped.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2015-07-04 02:31:44 +02:00
Arseniy Seroka
b152a0b094
Merge pull request #8618 from taku0/firefox-bin-39.0
...
firefox-bin: 38.0.5 -> 39.0
2015-07-04 03:09:03 +03:00
Arseniy Seroka
8efa25b5e3
Merge pull request #8596 from akaWolf/master
...
qtcreator: 3.2.1 -> 3.4.2
2015-07-04 03:08:19 +03:00
taku0
443e9843eb
firefox-bin: 38.0.5 -> 39.0
2015-07-04 09:06:35 +09:00
Arseniy Seroka
1fd18a0d86
Merge pull request #8627 from kquick/fix/htmlize-source-location
...
htmlize: update source location
2015-07-04 03:04:43 +03:00
Arseniy Seroka
14ceec7c26
Merge pull request #8616 from lihop/vim-plugins
...
vimPlugins: add vim-sleuth and CSApprox
2015-07-04 02:59:53 +03:00
Arseniy Seroka
f71b7f08af
Merge pull request #8579 from jraygauthier/jrg/i686_linux_libspotify
...
Add support for libspotify on `i686-linux`.
2015-07-04 02:54:59 +03:00
Kevin Quick
882f3ad0db
htmlize: update source location
2015-07-03 15:33:26 -07:00
Peter Simons
b451382c63
Merge pull request #8581 from jraygauthier/jrg/upgrade_ghcjs_source
...
Upgraded ghcjs package.
2015-07-03 20:44:08 +02:00
Leroy Hopson
b0e6cedf6e
vimPlugins: add vim-sleuth
2015-07-04 02:19:57 +12:00
Leroy Hopson
a28f0340e1
vimPlugins: add CSApprox
2015-07-04 02:19:57 +12:00
Joachim Schiele
11cd596aea
wordpress: language downloads are now reproducible
2015-07-03 13:06:44 +02:00
Pascal Wittmann
d5275c70c3
mcabber: update from 0.10.3 to 1.0.0
2015-07-03 10:18:48 +02:00
lethalman
5a2d1fedbc
Merge pull request #8615 from kamilchm/albatross
...
New GTK theme - Albatross from Shimmer Project
2015-07-03 09:57:16 +02:00
Edward Tjörnhammar
6257425dab
linuxPackages.nvidia_x11_legacy340: fix cr4 references
...
Patch was copied from here:
https://devtalk.nvidia.com/default/topic/813458/linux-4-0-rc1-346-47-build-error-_cr4-functions-fix/
Reference to kernel change, also noted in the forum post:
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/arch/x86/include/asm/paravirt.h?id=1e02ce4cccdcb9688386e5b8d2c9fa4660b45389
2015-07-03 09:32:14 +02:00
Kamil Chmielewski
6db7437a64
New GTK theme - Albatross from Shimmer Project
...
http://shimmerproject.org/our-projects/albatross/
2015-07-03 08:40:40 +02:00
Tobias Geerinckx-Rice
8e16c57424
nox: show trace for evaluation errors
...
Backports upstream commit 8900531.
2015-07-03 04:52:06 +02:00
Tobias Geerinckx-Rice
dfdcbb3640
python-packages: prompt_toolkit 0.41 -> 0.42
2015-07-03 04:13:02 +02:00
Tobias Geerinckx-Rice
1869f171fd
stress-ng: 0.04.07 -> 0.04.10
2015-07-03 04:08:49 +02:00
Arseniy Seroka
c5245300e2
Merge pull request #8587 from matthiasbeyer/update-gpgme
...
gpgme: 1.5.4 -> 1.5.5
2015-07-02 19:44:55 +03:00
William A. Kennington III
7735b2e4c5
udisks: 2.1.4 -> 2.1.6
2015-07-02 09:05:15 -07:00
Pascal Wittmann
8af3eab207
Merge pull request #8601 from ts468/upstream.pam_mount
...
pam_mount: version update: 2.14 -> 2.15
2015-07-02 17:43:04 +02:00
Thomas Strobel
31ba3ab30d
pam_mount: version update: 2.14 -> 2.15
2015-07-02 16:49:35 +02:00
Pascal Wittmann
a5360c5b6e
libbladeRF: update from 1.1.0 to 1.4.0
2015-07-02 16:25:24 +02:00
Eelco Dolstra
f3e2b31297
blender: Update to 2.75
...
(cherry picked from commit 36779d90e2b7e93ec5387cc5b5d106a037eb3d11)
2015-07-02 15:36:46 +02:00
Eelco Dolstra
24d922ec3a
openimageio: Update to 1.4.16 and fix name
...
(cherry picked from commit 17994d9e54448d71246f1221b188118fa7653ff7)
2015-07-02 15:36:42 +02:00
Eelco Dolstra
05baf485f6
ilmbase, openexr: Use fetchurl
...
Also, enable parallel building.
(cherry picked from commit 6c06d7467edea0a5163aeb53f72750abcb044bbe)
2015-07-02 15:36:37 +02:00
aszlig
b65d351c30
duperemove: Update from 0.09.beta2 to 0.09.4.
...
Also switches to fetchFromGitHub to remove the need to depend on Git for
fetching the source tarball.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2015-07-02 12:28:26 +02:00
Pascal Wittmann
27e0488e11
Merge pull request #8421 from travisbhartwell/update/atom
...
atom: 0.187.0 -> 1.0.0
2015-07-02 11:37:33 +02:00
Arseniy Seroka
afa1f5ba22
Merge pull request #8586 from vbgl/ocaml-updates
...
Ocaml package updates
2015-07-02 12:06:29 +03:00
William A. Kennington III
b21fd5d066
nixos/postgresql: Fix initdb for existing, empty postgres partitions
2015-07-02 00:08:02 -07:00
Artjom Vejsel
20dadbe525
qtcreator: 3.2.1 -> 3.4.2
2015-07-02 09:08:13 +03:00
William A. Kennington III
54022375eb
zfs_git: 2015-06-22 -> 2015-07-01
2015-07-01 22:52:09 -07:00
William A. Kennington III
f6f9b9574d
zfs: 0.6.4.1 -> 0.6.4.2
2015-07-01 22:50:49 -07:00
William A. Kennington III
ca5c1e4187
spl_git: 2015-06-10 -> 2015-06-29
2015-07-01 22:49:36 -07:00
William A. Kennington III
4fc07740c6
spl: 0.6.4.1 -> 0.6.4.2
2015-07-01 22:48:21 -07:00
Tobias Geerinckx-Rice
1ea70323d6
mcelog: 120 -> 121
2015-07-02 03:35:35 +02:00
Tobias Geerinckx-Rice
4023da6237
ccache: drop unnecessary perl dependency
...
Backport a one-line patch to remove the test suite's dependency on
perl, which, while not exactly heavy, is unnecessary.
2015-07-02 03:35:35 +02:00
Arseniy Seroka
bc9079dc53
Merge pull request #8589 from matthiasbeyer/update-klaus
...
klaus: 0.4.9 -> 0.4.10
2015-07-02 03:16:32 +03:00
Arseniy Seroka
e18f001241
Merge pull request #8588 from matthiasbeyer/update-cloc
...
cloc: 1.62 -> 1.64
2015-07-02 03:16:15 +03:00
Arseniy Seroka
fd2ee86a1a
Merge pull request #8575 from i-bot/update/eclipse-sdk
...
eclipse-sdk: 4.4.2 -> 4.5
2015-07-02 03:15:58 +03:00
Thomas Tuegel
32a1be47a2
Merge branch 'qt5'
2015-07-01 16:59:14 -05:00
Pascal Wittmann
b6db9b9553
src: update from 0.13 to 0.19
2015-07-01 23:43:17 +02:00
Pascal Wittmann
50bc786ce6
Merge pull request #8591 from maurer/ulex-mac
...
ulex: enable mac building
2015-07-01 23:19:35 +02:00
Matthew Maurer
028f6b3b62
ulex: enable mac building
...
I've tested that ulex builds (and works) on OSX, and see no reason
it would not do so on other platforms, so I'm lifting the linux
restriction in platforms.
2015-07-01 20:17:03 +00:00
Matthias Beyer
279057da8d
klaus: 0.4.9 -> 0.4.10
2015-07-01 20:47:04 +02:00
Matthias Beyer
ab9e853801
cloc: 1.62 -> 1.64
2015-07-01 20:42:44 +02:00