Commit Graph

165801 Commits

Author SHA1 Message Date
Jörg Thalheim
9d8ccfe00f
Merge pull request #51398 from risicle/ris-afl-qemu-fix
afl-qemu: update to qemu 2.10.0, as specified by afl 2.52b
2019-01-06 01:50:55 +01:00
Dmitry Kalinkin
0308087b74
Merge pull request #53468 from asymmetric/anki-2.1.8
anki: 2.1.7 -> 2.1.8
2019-01-05 19:15:12 -05:00
Dmitry Kalinkin
d2cfddd3b5
anki: fix build on darwin
Runtime doesn't work:

ModuleNotFoundError: No module named 'PyQt5.QtWebEngineWidgets'

This is probably because qtwebengine is broken on darwin, but doesn't
fail the build (#40149)
2019-01-05 19:13:10 -05:00
Ryan Mulligan
d62e013359
Merge pull request #53158 from ryantm/haskell-binary-orphans
haskellPackages.binary-orphans: dontCheck
2019-01-05 16:03:35 -08:00
markuskowa
bdbf3f964f
Merge pull request #53377 from marsam/update-bfs
bfs: 1.2.4 -> 1.3.1
2019-01-06 00:42:17 +01:00
Lorenzo Manacorda
90c68f650d anki: 2.1.7 -> 2.1.8 2019-01-06 00:09:10 +01:00
Francesco Gazzetta
e7551acb7b pythonPackages.staticjinja: init at 0.3.4 2019-01-05 17:09:20 -05:00
Francesco Gazzetta
779e916c3b pythonPackages.easywatch: init at 0.0.5 2019-01-05 17:09:20 -05:00
Luke Sandell
fada7041a0 wsjtx: 1.9.1 -> 2.0.0
Old version of FT8 protocol was obsoleted on 2019-01-01.
2019-01-05 15:59:43 -06:00
Michael Weiss
46dd27e025
pythonPackages.gcutil: Deprecate the package
The package doesn't exist anymore (even the deprecation notice is gone
[0]) and the build is currently broken:
Collecting google-apputils==0.4.1 (from gcutil==1.16.1)
  Could not find a version that satisfies the requirement
google-apputils==0.4.1 (from gcutil==1.16.1) (from versions: )
No matching distribution found for google-apputils==0.4.1 (from
gcutil==1.16.1)

[0]: https://download.huihoo.com/google/gdgdevkit/DVD1/developers.google.com/compute/docs/gcutil.1.html
> "Warning: gcutil is deprecated. We encourage you to transition to
> using gcloud compute ."
2019-01-05 22:56:13 +01:00
Michael Weiss
35bee29824
pythonPackages.simplejson: Update the metadata
The old homepage URL returns a 404 and the project is dual-licensed.
2019-01-05 22:56:13 +01:00
Vladimír Čunát
a68ae2c205
obs-studio: restrict meta.platforms
Hydra has been trying to build it on aarch64-linux, but never succeeded:
https://hydra.nixos.org/job/nixpkgs/trunk/obs-studio.aarch64-linux/all
(It tries to feed compiler x86-specific options.)
I didn't test i686-linux, due to a transitive dependency not building
(libupnp), but there it might likely work.
2019-01-05 22:51:21 +01:00
Michael Weiss
2acda72b85
python27Packages.weboob: Override google_api_python_client 2019-01-05 22:32:49 +01:00
Michael Weiss
8d9c2fc3ff
python37Packages.google_api_python_client: 1.7.4 -> 1.7.7 2019-01-05 22:32:49 +01:00
Michael Raskin
f27fe449b1 pythonPackages.ldap3: switch src to fetchFromGitHub
PyPI links to a source tarball at PythonHosted that has an empty
ldap3/protocol/sasl/digestMd5.py
while the linked egg file has a non-empty file (and the upstream GitHub
repository has a non-empty file that hasn't even had a non-comment
change for some time.
2019-01-05 22:37:00 +01:00
Vladimír Čunát
e6aa4d76ed
Merge #53164: vlc: 3.0.4 -> 3.0.5
https://mailman.videolan.org/pipermail/videolan-announce/2018-December/000173.html
2019-01-05 22:05:41 +01:00
roconnor
9ff125c9ce
Merge pull request #52868 from roconnor/bitcoin
Bitcoin: 0.17.0 -> 0.17.1
2019-01-05 15:15:16 -05:00
Will Dietz
93a5522a7b
Merge pull request #53459 from dtzWill/update/gllvm-1.2.3
gllvm: 1.2.2 -> 1.2.3
2019-01-05 14:02:25 -06:00
Will Dietz
d42d70aee9
Merge pull request #53417 from dtzWill/update/getdns-1.5.0
getdns: 1.4.2 -> 1.5.0, stubby: 0.2.3 -> 0.2.4
2019-01-05 13:54:26 -06:00
Will Dietz
fcfdeedab9
Merge pull request #51339 from dtzWill/feature/minizincide
minizincide: init at 2.2.3
2019-01-05 13:48:52 -06:00
Will Dietz
2d79465173
Merge pull request #51700 from dtzWill/update/i2c-tools-4.1
i2c-tools: 4.0 -> 4.1
2019-01-05 13:46:26 -06:00
Will Dietz
6f886ca7aa gllvm: 1.2.2 -> 1.2.3
https://github.com/SRI-CSL/gllvm/releases/tag/v1.2.3
2019-01-05 13:39:17 -06:00
Will Dietz
5adde64416 minizincide: minor touchups per reviewer suggestion
(sourceRoot needed a "source/" prefix, FWIW)
2019-01-05 13:35:10 -06:00
Markus Kowalewski
256ae3ab48
uhd: 3.12.0.0 -> 3.13.0.1 2019-01-05 19:52:55 +01:00
Ryan Mulligan
d637039acf
Merge pull request #53432 from jerith666/haskell-fixes
haskell: friday: jailbreak
2019-01-05 10:48:48 -08:00
Ryan Mulligan
f706777f5b haskellPackages.binary-orphans: dontCheck 2019-01-05 10:29:20 -08:00
Ryan Mulligan
e5512a158c
Merge pull request #53159 from ryantm/haskell-github
haskellPackages.github: dontCheck
2019-01-05 10:25:08 -08:00
Ryan Mulligan
88029fc8af
Merge branch 'master' into haskell-github 2019-01-05 10:02:30 -08:00
Tadeo Kondrak
0d99389a6d wine: add perl to buildInputs to fix winemaker 2019-01-05 18:40:59 +01:00
Jörg Thalheim
09fb07e4af
Merge pull request #52943 from ck3d/vdr-enableLirc
nixos vdr: introduce option enableLirc
2019-01-05 17:51:41 +01:00
Dmitry Kalinkin
8a7d9e6dd0 offlineimap: provide "OS-DEFAULT" CA certificates (#53268) 2019-01-05 17:38:10 +01:00
xeji
361d64de02
Merge pull request #53398 from Mic92/cryptominisat
cryptominisat: 5.0.1 -> 5.6.6
2019-01-05 17:34:50 +01:00
Jörg Thalheim
e2b79b10b5
afl: various cleanups 2019-01-05 17:22:24 +01:00
Jörg Thalheim
5da3d039d4
qemu-afl: various cleanups 2019-01-05 17:22:06 +01:00
Jörg Thalheim
8a2389e4a1
Merge pull request #53404 from Mic92/xsslock
nixos/xss-lock: specify a default locker
2019-01-05 16:44:29 +01:00
Jörg Thalheim
2614c8a6c5
nixos/xss-lock: specify a default locker
Having a default locker is less error-prone and more convenient.
Incorrect values might leave the machine vulnerable since there is no
fallback.
2019-01-05 16:42:30 +01:00
Jörg Thalheim
37fe593d48
cryptominisat: switch to python3 2019-01-05 16:38:10 +01:00
Vladimír Čunát
d84a33d85b
Merge branch 'master' into staging-next
A few more rebuilds (~1k on x86_64-linux).
2019-01-05 15:02:04 +01:00
R. RyanTM
df834ee56d sysstat: 12.1.1 -> 12.1.2 (#52675)
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/sysstat/versions
2019-01-05 14:47:25 +01:00
Matt McHenry
8358ffc708 haskellPackages.friday: jailbreak 2019-01-05 08:39:09 -05:00
Domen Kožar
5ec91bac2f
Merge pull request #53326 from domenkozar/elm-packaging-rehaul
Elm: automate packaging with elm2nix
2019-01-05 13:20:16 +00:00
Joachim Fasting
167578163a
nixos/hardened profile: always enable pti 2019-01-05 14:07:39 +01:00
Joachim Fasting
3f1f443125
nixos/hardened profile: slab/slub hardening
slab_nomerge may reduce surface somewhat

slub_debug is used to enable additional sanity checks and "red zones" around
allocations to detect read/writes beyond the allocated area, as well as
poisoning to overwrite free'd data.

The cost is yet more memory fragmentation ...
2019-01-05 14:07:37 +01:00
Joachim Fasting
d62086e6fc
hardened-config: allow slub/slab free poisoning 2019-01-05 14:07:36 +01:00
Joachim Fasting
11840f5c70
hardened-config: explain HARDENED_USERCOPY_FALLBACK n 2019-01-05 14:07:36 +01:00
Joachim Fasting
dfd77a046d
hardened-config: ensure STRICT_KERNEL_RWX
This is y in the default config, but enable it explicitly here to catch
situations where it has been disabled (explicitly or implicitly).
2019-01-05 14:07:35 +01:00
Joachim Fasting
1801aad7b8
hardened-config: clarify MODIFY_LDT_SYSCALL
This likely never worked; MODIFY_LDT_SYSCALL depends on EXPERT; enabling
EXPERT however seems to introduce quite a few changes that would need to be
properly vetted.

The version guard is unnecessary, however, as this config has been supported
since 4.3.
2019-01-05 14:07:34 +01:00
Joachim Fasting
abc8ed3fca
hardened-config: clarify readonly LSM hooks config
SECURITY_WRITABLE_HOOKS is implicitly controlled by SECURITY_SELINUX_DISABLE;
explicitly unsetting results in an error because the configfile builder fails
to detect that it has in fact been unset (reporting it as an unused option).
For now, leave WRITABLE_HOOKS as an "optional" config for documentation
purposes.
2019-01-05 14:07:33 +01:00
Joachim Fasting
c68e8b05f0
Revert "linux-hardened: Disable GCC_PLUGIN_RANDSTRUCT"
This reverts commit 5dda1324be.

Presumably this was done to work around build errors or something but it
works fine now.
2019-01-05 14:07:21 +01:00
Jörg Thalheim
0a2c8cc1db
nixos/systemd-udev-settle: don't restart on upgrades
The idea is that we only need this target during boot,
however there is no point on restarting it on every upgrade.

This hopefully fixes #21954
2019-01-05 13:57:29 +01:00