Vladimír Čunát
6bded45883
flex: 2.6.1 -> 2.6.3
...
This resolves some warnings and errors introduced in 2.6.x.
2016-12-30 23:17:08 +01:00
Aneesh Agrawal
652a87018b
googleAuthenticator: 1.0 -> 1.03
2016-12-30 06:49:17 -05:00
Eelco Dolstra
bbd03e236a
Use looser 9pfs caching in VM tests/builds
...
This can give significant speed ups, see
7e20254412
2016-12-29 21:26:16 +01:00
Robin Gloster
3fcdbedbef
iproute: 4.8.0 -> 4.9.0
2016-12-29 02:52:55 +01:00
Franz Pletz
1cbb04e72e
iproute: 4.7.0 -> 4.8.0
2016-12-29 02:52:55 +01:00
Robin Gloster
3e8bb7237d
cryptsetup: 1.7.1 -> 1.7.3
2016-12-29 02:52:54 +01:00
Franz Pletz
c2a979fbfd
cryptsetup: 1.7.0 -> 1.7.1
2016-12-29 02:52:54 +01:00
Nikolay Amiantov
cdf306909f
udev182: remove
2016-12-29 00:11:40 +03:00
Nikolay Amiantov
a36a2412ee
libudev0-shim: init at 1
2016-12-29 00:11:40 +03:00
Tuomas Tynkkynen
45338a3077
fuse: Minor cleanup
2016-12-28 17:37:10 +02:00
Franz Pletz
c6bcc485de
linux_4_8: add patch to fix CVE-2016-9919
2016-12-28 06:35:11 +01:00
Tuomas Tynkkynen
5ba7f33e3a
linux_testing: 4.9-rc8 -> 4.10-rc1
2016-12-27 01:35:10 +02:00
Tuomas Tynkkynen
e60bb86d00
kexectools: 2.0.13 -> 2.0.14
...
ARM patch is included upstream now.
2016-12-26 18:54:34 +02:00
Michael Raskin
2c616b0473
xf86-input-wacom: 0.32.0 -> 0.34.0
2016-12-25 22:56:32 +01:00
aszlig
6af6cec8b2
Revert "thin-provisioning-tools: init at 0.6.1"
...
This reverts commit 55b18ac486cd1ec18b42
2016-12-25 02:05:49 +01:00
Tuomas Tynkkynen
0e3b56c7b9
alsa-lib: Remove unnecessary crossAttrs
...
It's breaking the cross build.
2016-12-24 22:41:32 +02:00
Jörg Thalheim
c98f3ffea8
wireguard: 0.0.20161218 -> 0.0.20161223
2016-12-24 13:55:32 +01:00
Vladimír Čunát
c655399126
Merge branch 'staging'
2016-12-24 10:50:49 +01:00
Frederik Rietdijk
9f6bd82364
nvidia-x11: 375.20 -> 375.26
2016-12-23 10:57:28 +01:00
Vladimír Čunát
2e03ae274d
Merge branch 'master' into staging
2016-12-22 11:28:56 +01:00
Graham Christensen
3ffb5ba60c
linux:3.18.44 -> 3.18.45
2016-12-21 21:08:47 -05:00
Graham Christensen
53e21529d4
linux:3.12.68 -> 3.12.69
2016-12-21 21:08:47 -05:00
Jason A. Donenfeld
77588ca442
wireguard: 20161209 -> 20161218 ( #21288 )
2016-12-22 03:04:55 +01:00
Joachim Fasting
6758d157d2
multipath-tools: ensure gzip does not capture timestamp
...
gzip is originally called as 'gzip -9 -c'
This is a port of
a8e7ddd1df
2016-12-20 15:31:55 +01:00
Aristid Breitkreuz
bb18e10ba0
Merge remote-tracking branch 'origin/master' into staging
2016-12-20 14:05:30 +01:00
Dan Peebles
377cef8d16
apple-sdk: 10.9 -> 10.11
2016-12-19 19:47:24 -05:00
Rok Garbas
b7cfbf96d6
tp_smapi: updateScript added
2016-12-18 16:45:33 +01:00
Franz Pletz
eb559d2b07
batman-adv: 2016.4 -> 2016.5
2016-12-18 05:23:38 +01:00
aszlig
ffe71cbe19
kexec-tools: Add patch to fix build on ARM
...
Building on ARM fails with the following error:
kexec/arch/arm/phys_to_virt.o kexec/arch/arm/phys_to_virt.c
kexec/arch/arm/phys_to_virt.c:3:26: fatal error: phys_to_virt.h: No such file or directory
The patch I'm using is from Fedora:
http://pkgs.fedoraproject.org/cgit/rpms/kexec-tools.git/tree/kexec-tools-2.0.13-fix-armv7-build-failure.patch?id=97581f1a435aafa298a4d0bbcfaf40c63a41ce92
It has been reported upstream as well:
http://lists.infradead.org/pipermail/kexec/2016-September/017352.html
I'm adding the patch for all architectures, so that the next person to
upgrade kexec-tools doesn't forget that even while on x86.
Tested building with i686-linux, x86_64-linux and armv7l-linux.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-12-18 04:49:39 +01:00
Vladimír Čunát
86e4c9ed46
Merge branch 'master' into staging
2016-12-17 20:29:25 +01:00
Tim Steinbach
0e8e4a08f3
linux: 4.8.14 -> 4.8.15
2016-12-16 08:16:45 -05:00
Tim Steinbach
cb9ff3f7f9
linux: 4.4.38 -> 4.4.39
2016-12-16 08:16:22 -05:00
Joachim Fasting
f0e77cd07d
grsecurity: 4.8.14-201612110933 -> 4.8.15-201612151923
2016-12-16 12:46:44 +01:00
Franz Pletz
a4586f87dc
wireguard: 20161129 -> 20161209
2016-12-16 12:16:39 +01:00
Will Dietz
be24f1d364
musl: 1.1.11 -> 1.1.15, add security patch. ( #21023 )
2016-12-16 11:32:28 +01:00
Daiderd Jordan
a01a5ed925
darwin.libunwind: fix source
...
Fixes #20977
since this was the same sha as the linux package nix just used that instead.
2016-12-15 21:11:04 +01:00
Jörg Thalheim
4714ca8b56
kexec-tools: 2.0.12 -> 2.0.13 ( #21158 )
...
also fix kexec by removing faulty hardeningFlags
2016-12-15 20:48:03 +01:00
Daiderd Jordan
87b3918d0b
Merge pull request #21133 from matthewbauer/shell_cmds
...
shell_cmds: init at 198
2016-12-15 17:53:09 +01:00
Daniel Peebles
0f17a2ba1e
Merge pull request #21167 from matthewbauer/remove-coreosmakefiles
...
darwin.CoreOSMakefiles: remove
2016-12-15 09:27:22 -05:00
Matthew Bauer
ac4f27666e
darwin.CoreOSMakefiles: remove
...
This wasn't being used and it was causing an error when evaluating:
error: attribute ‘CoreOSMakefiles’ missing, at /Users/mbauer/Projects/nixpkgs2/pkgs/os-specific/darwin/apple-source-releases/default.nix:140:71
2016-12-14 23:45:19 -06:00
Matthew Bauer
83c7660279
shell_cmds: init at 187
...
fixes #11707
2016-12-14 21:18:09 -06:00
Daiderd Jordan
14bf940610
Revert "darwin.libunwind: fix install phase"
...
This reverts commit 76125722f0
2016-12-15 00:37:37 +01:00
Daniel Peebles
e6d28d6643
Merge pull request #21003 from LnL7/darwin-libunwind
...
darwin.libunwind: fix install phase
2016-12-14 18:03:24 -05:00
Graham Christensen
01d022e16b
Merge pull request #21118 from grahamc/fix-rsa-build-failure
...
linux_{4_8,grsec_nixos}: patch to fix build failure
2016-12-13 09:15:50 -05:00
Joachim Fasting
d918c80e13
grsecurity: disable verbose initify
...
Not as useful/informative as I had hoped.
2016-12-13 15:12:34 +01:00
Graham Christensen
7a813d3f6d
linux_{4_8,grsec_nixos}: patch to fix build failure
...
crypto/rsa_helper.c:18:28: fatal error: rsapubkey-asn1.h: No such file or directory
2016-12-13 07:25:46 -05:00
Jörg Thalheim
7c8d4cd9a9
wireguard: 0.0.20161116.1 -> 0.0.20161129
2016-12-12 14:41:43 +01:00
Shea Levy
f6daae391f
linux: add 4.9
2016-12-11 19:33:05 -05:00
Joachim Fasting
601058e0e2
grsecurity: 4.8.13-201612082118 -> 4.8.14-201612110933
2016-12-11 19:09:16 +01:00
Tim Steinbach
f576c490e3
linux: 4.4.37 -> 4.4.38
2016-12-10 15:18:52 -05:00
Tim Steinbach
b69822c505
linux: 4.8.13 -> 4.8.14
2016-12-10 15:15:44 -05:00
Tuomas Tynkkynen
bdab6fe5a1
kernel: Use built-in dtbs_install target instead of rolling our own
...
In particular, on aarch64 all the .dtb files will be in subdirectories
and *.dtb won't match anything.
2016-12-10 20:24:08 +02:00
Franz Pletz
9074d9859e
linux: add patch to fix CVE-2016-8655
...
See https://lwn.net/Articles/708319/ for more information.
2016-12-10 17:08:42 +01:00
Frederik Rietdijk
033525c6b8
dstat: fix bad interpreter: No such file
2016-12-10 14:21:51 +01:00
Vladimír Čunát
0fa8ead76c
Merge #21029 : nghttp2: 1.16.1 -> 1.17.0
2016-12-10 00:52:26 +01:00
Bjørn Forsman
2077385421
kernel: enable CONFIG_DYNAMIC_DEBUG (like Fedora and Ubuntu)
...
It was useful in tracking down CIFS + DFS issue, and it's apparently
enabled by default in two major distros.
2016-12-10 00:01:21 +02:00
Bjørn Forsman
d429520b13
kernel: add CONFIG_CIFS_* like Fedora, Ubuntu
...
The plan is to fix mounting DFS shares on NixOS (for which some of these
options are needed), but I figured it might be a good idea to enable all
CONFIG_CIFS_* like Fedora 24 and Ubuntu 16.04 while at it. Ubuntu even
has CONFIG_CIFS_SMB311, but as Fedora do not, I left it out.
Mounting DFS shares still doesn't work; need to configure cifs.upcall
and /etc/request-key.conf. Until then, using GVFS as a workaround.
2016-12-10 00:01:21 +02:00
Bjørn Forsman
fc6d82cf76
cifs-utils: add 'talloc' to buildInputs, to build cifs.upcall
...
Fixes this ./configure symptom:
configure: WARNING: talloc.h not found, consider installing libtalloc-devel. Disabling cifs.upcall.
and is needed to (eventually) fix CIFS + DFS kernel mount on NixOS.
2016-12-10 00:01:21 +02:00
Vladimír Čunát
b05b120779
Merge branch 'master' into staging
2016-12-09 19:11:05 +01:00
Joachim Fasting
d1a5dc0b1c
grsecurity: 4.8.12-201612062306 -> 4.8.13-201612082118
2016-12-09 15:31:02 +01:00
Joachim Fasting
9a63779d64
grsecurity: use upstream url as the primary source
2016-12-09 15:31:00 +01:00
Joachim Fasting
ca7cc96ee8
grsecurity: enable PAX_INITIFY
...
Uses gcc plugin to detect more instances where memory used during init
can be freed.
2016-12-09 15:30:40 +01:00
Tim Steinbach
bfffbb5ea6
linux: 4.8.12 -> 4.8.13
2016-12-09 08:27:11 -05:00
Tim Steinbach
e861a5f7af
linux: 4.4.36 -> 4.4.37
2016-12-09 08:26:46 -05:00
Daiderd Jordan
76125722f0
darwin.libunwind: fix install phase
2016-12-09 00:08:58 +01:00
Joachim Fasting
af1202434a
ndiswrapper: mark as broken
...
Build fails across all our kernels. There is a new version 1.60, but
it, too, fails to build. Until somebody comes along to patch around it,
we might as well mark this as broken.
2016-12-08 23:12:32 +01:00
Joachim Fasting
5fd4ffe00f
grsecurity: 4.8.12-201612031658 -> 201612062306
2016-12-08 12:22:13 +01:00
Dmytro Rets
e8220d3264
Update broadcom URL for broadcom-sta driver.
2016-12-08 11:50:31 +02:00
Anthony Cowley
1712366bac
apple-sdk: Include system cups libraries
...
The SDK includes cups header files, but not the libraries. The
`nixpkgs.cups` definition doesn't build on darwin due to the SDK being
too old. This change symlinks the system cups libraries into the old
SDK.
2016-12-07 23:14:38 +01:00
Tim Steinbach
c9d1d430ec
linux: 4.9-rc7 -> 4.9-rc8
2016-12-05 19:40:11 -05:00
Joachim Fasting
9578299bbe
grsecurity: 4.8.11-201611271225 -> 4.8.12-201612031658
2016-12-06 01:24:32 +01:00
Joachim Fasting
cc396697a6
grsecurity: enable ability to lock in readonly mounts
2016-12-06 01:24:12 +01:00
Joachim Fasting
0e765c72e5
grsecurity: enable module hardening
2016-12-06 01:23:58 +01:00
Joachim Fasting
071fbcda24
grsecurity: enable optional sysfs restrictions
...
Fairly severe, but can be disabled at bootup via
grsec_sysfs_restrict=0. For the NixOS module we ensure that it is
disabled, for systemd compatibility.
2016-12-06 01:23:36 +01:00
Joachim Fasting
8c1f5afdf3
grsecurity: delay toggling of sysctls until system is up
...
We generally trust init, so there's little point in having these enabled
during early bootup; it accomplishes little except fill our logs with
spam.
2016-12-06 01:22:53 +01:00
Tuomas Tynkkynen
f91458ca38
reattach-to-user-namespace: Set platforms
2016-12-05 02:36:54 +02:00
Tuomas Tynkkynen
9ccc14b1bc
linux_rpi: Add some feature flags
...
Copied from linux_4_4 (except for the EFI stub thing).
Otherwise the firewall module fails to evaluate:
Failed assertions:
- This kernel does not support rpfilter
2016-12-04 18:18:06 +02:00
Jörg Thalheim
e00632e200
Merge pull request #20858 from Mic92/lxcfs
...
lxcfs: init at 2.0.4
2016-12-04 11:33:07 +01:00
Tim Steinbach
4f8b74b401
Merge pull request #20866 from NeQuissimus/linux_4_8_12
...
linux: 4.8.11 -> 4.8.12
2016-12-02 18:28:46 -05:00
Tim Steinbach
853b6493c8
linux: 4.8.11 -> 4.8.12
2016-12-02 14:29:00 -05:00
Tim Steinbach
654f5df5dc
linux: 4.4.35 -> 4.4.36
2016-12-02 14:28:26 -05:00
Jörg Thalheim
af609b0254
lxcfs: init at 2.0.4
2016-12-02 13:52:03 +01:00
Tim Steinbach
5afc6b506c
linux: 4.1.35 -> 4.1.36
2016-12-01 20:34:02 -05:00
Joachim F
85ecde87c8
Merge pull request #20804 from danbst/fix-shadow
...
shadow: fix collision with coreutils (man groups.1.gz)
2016-12-01 23:08:30 +01:00
danbst
ac51528df8
shadow: fix collision with coreutils (man groups.1.gz)
...
The `groups.1.gz` collides with one from coreutils. The code to fix this
was already present in expression, but wrongly assumes that share/man/man1
directory will be copied to `man` output after `installPhase`.
It turned out, that man directory is set at configure step, so we should
remove file from `man` output.
2016-11-30 01:44:28 +02:00
Tim Steinbach
18a3225dac
linux: 3.12.67 -> 3.12.68
2016-11-29 17:40:17 -05:00
Tuomas Tynkkynen
8a4d6516ee
Merge remote-tracking branch 'upstream/staging' into master
2016-11-30 00:34:23 +02:00
Franz Pletz
e43f2fc868
Revert "lxc: 2.0.4 -> 2.0.6"
...
This reverts commit 5d804566df
2016-11-29 15:42:37 +01:00
Matt McHenry
f0bdca82c0
linuxPackages.ati_drivers_x11: patch for kernel 4.7+ ( #19810 )
2016-11-28 19:56:50 +01:00
Franz Pletz
5d804566df
lxc: 2.0.4 -> 2.0.6
...
Fixes CVE-2016-8649.
See https://lists.linuxcontainers.org/pipermail/lxc-users/2016-November/012597.html .
2016-11-28 19:04:42 +01:00
Peter Simons
21a5532c57
Merge pull request #20766 from avnik/update/lxc
...
lxc: 2.0.4 -> 2.0.6 (security)
2016-11-28 15:13:10 +01:00
Alexander V. Nikolaev
a8eeef62e6
lxc: 2.0.4 -> 2.0.6 (security)
...
https://security-tracker.debian.org/tracker/CVE-2016-8649
2016-11-28 15:17:06 +02:00
Alexander V. Nikolaev
121da5e938
lxc: fix sandbox builds
...
Package attempt to write /etc/bash_completion.d, I directed it to
"${out}/etc/bash_completion.d" as it was suggested.
2016-11-28 15:17:05 +02:00
Graham Christensen
04edf297cc
Merge pull request #20676 from matthewbauer/file_cmds
...
file_cmds: init at 264.1.1
2016-11-28 06:48:18 -05:00
Joachim Fasting
5da1394a58
Revert "gradm: fix using gradm while the RBAC system is active"
...
This reverts commit fdbf7dc8b3
2016-11-28 11:41:12 +01:00
Joachim Fasting
b90ed0cc80
grsecurity: 4.8.10-201611232213 -> 4.8.11-201611271225
2016-11-28 11:41:10 +01:00
Joachim Fasting
4c7323545b
Revert "grsecurity: work around for #20490 "
...
This reverts commit e38b74ba89
2016-11-28 11:40:55 +01:00
Matthew Bauer
bd57e32312
file_cmds: init at 264.1.1
2016-11-27 21:58:07 -06:00
Tim Steinbach
eecf76eaa2
linux: 4.9-rc6 -> 4.9-rc7
2016-11-27 19:48:24 -05:00
Tuomas Tynkkynen
86ea3126bc
linux_rpi: 1.20160620 -> 1.20161020
2016-11-28 00:24:00 +02:00
