My nixpkgs mirror for patching things.
Go to file
Austin Seipp 64efd184ed grsecurity: Fix GRKERNSEC_PROC restrictions
Previously we were setting GRKERNSEC_PROC_USER y, which was a little bit
too strict. It doesn't allow a special group (e.g. the grsecurity group
users) to access /proc information - this requires
GRKERNSEC_PROC_USERGROUP y, and the two are mutually exclusive.

This was also not in line with the default automatic grsecurity
configuration - it actually defaults to USERGROUP (although it has a
default GID of 1001 instead of ours), not USER.

This introduces a new option restrictProcWithGroup - enabled by default
- which turns on GRKERNSEC_PROC_USERGROUP instead. It also turns off
restrictProc by default and makes sure both cannot be enabled.

Signed-off-by: Austin Seipp <aseipp@pobox.com>
2014-04-12 11:16:05 -05:00
doc Merge #1901: add preFixupPhases to stdenv; for gsettings 2014-04-02 19:06:41 +02:00
lib maintainers: ertes: New temporary email address. 2014-04-11 21:17:22 +02:00
maintainers/scripts nixpkgs-lint: Tweak 2014-03-31 19:49:01 +02:00
nixos grsecurity: Fix GRKERNSEC_PROC restrictions 2014-04-12 11:16:05 -05:00
pkgs Allow lsof to build on darwin (fixes #2219) 2014-04-12 11:14:18 -05:00
.gitignore Merge .gitignore files 2013-10-10 13:28:22 +02:00
.version Bump the overly optimistic version number 2014-02-28 16:56:32 +01:00
COPYING * Applying an MIT-style license to Nixpkgs. 2006-04-25 16:50:34 +00:00
default.nix Explicitly require Nix 1.6 2014-03-17 11:33:36 +01:00
README.md Fixed link to the installation instructions 2014-02-27 14:57:28 +01:00

Nixpkgs is a collection of packages for Nix package manager. Nixpkgs also includes NixOS linux distribution source code.