Commit Graph

6793 Commits

Author SHA1 Message Date
Robin Gloster
89ad46d9b4
sysdig: fix build with current curl 2017-08-12 18:38:36 +02:00
Vladimír Čunát
e207d1f04a
Merge older staging
There's a security fix for curl.
2017-08-12 09:48:17 +02:00
Jörg Thalheim
6c1528c48d Merge pull request #28169 from zx2c4/patch-6
wireguard: 0.0.20170726 -> 0.0.20170810
2017-08-11 22:30:29 +01:00
Joachim Fasting
345e0e6794
hardened-config: enable read-only LSM hooks
Implies that SELinux can no longer be disabled at runtime (only at boot
time, via selinux=0).

See https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dd0859dccbe291cf8179a96390f5c0e45cb9af1d
2017-08-11 23:27:58 +02:00
Jason A. Donenfeld
decbc7d50e wireguard: 0.0.20170726 -> 0.0.20170810 2017-08-11 21:04:17 +02:00
Lancelot SIX
e34ce9d1c5 gnupg: 2.1.22 -> 2.1.23
This release in a RC for gnupg-2.2. The main difference as far as
nixpkgs is concerned is that the binary `gpg2` is now called `gpg` and
`gpgv2` is called `gpgv`.

This update fixed all explicit use of `gpg2` and `gpgv2` across nixpkgs,
but there might be some packaged software that internally use `gpg2`
not handeled by this commit.

See http://lists.gnu.org/archive/html/info-gnu/2017-08/msg00001.html
for full release information
2017-08-11 19:24:06 +02:00
Robin Gloster
897eec7d79
linuxHeaders_2_{4,6}: remove 2017-08-11 19:13:09 +02:00
Robin Gloster
05b8cae9ec
linux: remove unused kernel patches 2017-08-11 19:13:09 +02:00
Robin Gloster
9f3f575ab3
linux_4_4: remove
Support ends in Feb 2018
2017-08-11 19:13:09 +02:00
Robin Gloster
0eb9c5bd42
linux_3_10: remove
Support ends in Oct 2017
2017-08-11 19:13:08 +02:00
Tim Steinbach
47d9b48e4d
linux: 4.12.5 -> 4.12.6 2017-08-11 12:14:53 -04:00
Tim Steinbach
f2d420e4c9
linux: 4.9.41 -> 4.9.42 2017-08-11 12:10:10 -04:00
Robin Gloster
28cc2642f0
treewide: use less phases if not necessary
This removes some skipping of e.g. fixupPhase and cleans up occurences
where this led to duplicating code
2017-08-11 11:40:36 +02:00
Tim Steinbach
f40f4f5440 Merge pull request #28120 from NeQuissimus/plymouth_0_9_3
plymouth: 0.9.2 -> 0.9.3
2017-08-10 21:05:29 -04:00
Jörg Thalheim
637cea679d Merge pull request #28109 from womfoo/bump/mbpfan-2.0.1
mbpfan: 1.9.1 -> 2.0.1
2017-08-10 21:22:18 +01:00
Tim Steinbach
ecd4c58d0a
plymouth: 0.9.2 -> 0.9.3 2017-08-10 16:21:24 -04:00
Kranium Gikos Mendoza
151fab911e mbpfan: 1.9.1 -> 2.0.1
removed patch for lsmod/grep as they are no longer used (dgraziotin/mbpfan@5f2da79)
2017-08-11 01:52:04 +10:00
Robin Gloster
60418e9196
edac-utils: fix makeWrapper call 2017-08-10 03:44:03 +02:00
Robin Gloster
46a25ea7ea
linuxPackages.bcc: fix using wrapProgram on .c file 2017-08-09 19:45:05 +02:00
Kranium Gikos Mendoza
725089bb2d powerstat: 0.02.11 -> 0.02.12 2017-08-08 23:46:01 +10:00
Kranium Gikos Mendoza
c943cf7c26 forkstat: 0.01.17 -> 0.02.00 2017-08-08 23:44:25 +10:00
Tim Steinbach
f46f98ad31
Revert 0cf0d7186a
Order common kernel config by functionality
See #27949
2017-08-07 17:34:10 -04:00
Tim Steinbach
fa10497834 Merge pull request #27684 from gnidorah/bfq
linux: BFQ Group Scheduling support
2017-08-07 11:58:45 -04:00
Tim Steinbach
06af1df857
linux: 4.13-rc3 -> 4.13-rc4 2017-08-07 11:40:01 -04:00
Tim Steinbach
ea2a10e143
linux: 4.4.79 -> 4.4.80 2017-08-07 11:35:42 -04:00
Tim Steinbach
4825e4818b
linux: 4.9.40 -> 4.9.41 2017-08-07 11:32:26 -04:00
gnidorah
dc21f1ad65 linux: BFQ Group Scheduling support 2017-08-07 10:12:21 +03:00
Tim Steinbach
1ec7242bc2
linux-copperhead: 4.12.4.a -> 4.12.5.a 2017-08-06 22:04:46 -04:00
Tim Steinbach
ff9479cd54
linux: 4.12.4 -> 4.12.5 2017-08-06 19:22:15 -04:00
Tim Steinbach
0cf0d7186a
linux-common-config: Refactor, clean up 2017-08-06 19:17:30 -04:00
Joachim Fasting
f963014829
linux-hardened-config: various fixups
Note
- the kernel config parser ignores "# foo is unset" comments so they
  have no effect; disabling kernel modules would break *everything* and so
  is ill-suited for a general-purpose kernel anyway --- the hardened nixos
  profile provides a more flexible solution
- removed some overlap with the common config (SECCOMP is *required* by systemd;
  YAMA is enabled by default).
- MODIFY_LDT_SYSCALL is guarded by EXPERT on vanilla so setting it to y breaks
  the build; fix by making it optional
- restored some original comments which I feel are clearer
2017-08-06 23:38:07 +02:00
Heitham Omar
5ac00265a8 linux-common-config: add CONFIG_HOTPLUG_PCI_ACPI 2017-08-06 20:41:28 +02:00
Tim Steinbach
ff10bafd00
linux: Expand hardened config
Based on latest recommendations at
http://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings
2017-08-06 09:58:02 -04:00
Robin Gloster
2b4811887a
kernel: add IP_NF_TARGET_REDIRECT 2017-08-04 08:26:09 +02:00
Jörg Thalheim
3ab208e108 Merge pull request #27924 from carlsverre/wpa_supplicant_bgscan
Enable BGSCAN for wpa_supplicant
2017-08-04 05:51:26 +01:00
Carl Sverre
6b62b566a1 wpa_supplicant: Enable BGSCAN module
Compile wpa_supplicant with the BGSCAN module enabled. This allows the
user to configure an SSID to use the bgscan module.  This module causes
wpa_supplicant to periodically perform a background scan for additional
access points and switch to the one with the highest signal.  This scan
can be kicked off when the current connection drops below a target
threshold signal strength.
2017-08-03 21:37:24 -07:00
Robin Gloster
dc13376ee2
wvdial: remove 2017-08-04 02:24:07 +02:00
Silvan Mosberger
f5fa5fa4d6 pkgs: refactor needless quoting of homepage meta attribute (#27809)
* pkgs: refactor needless quoting of homepage meta attribute

A lot of packages are needlessly quoting the homepage meta attribute
(about 1400, 22%), this commit refactors all of those instances.

* pkgs: Fixing some links that were wrongfully unquoted in the previous
commit

* Fixed some instances
2017-08-01 22:03:30 +02:00
Franz Pletz
4afb3f4ade
ipsecTools: add patch to fix CVE-2016-10396 2017-08-01 10:26:19 +02:00
Franz Pletz
1a4ce79a0d
pam_ldap: 183 -> 186 2017-08-01 08:36:35 +02:00
Franz Pletz
e5e556f19a
irqbalance: 1.1.0 -> 1.2.0 2017-08-01 08:36:33 +02:00
Franz Pletz
9719e43494
jool: 3.5.3 -> 3.5.4 2017-08-01 06:15:59 +02:00
Tuomas Tynkkynen
3db9a2bdff linux_rpi: 1.20170427 -> 1.20170515 2017-07-31 19:47:23 +03:00
Tuomas Tynkkynen
8523ab5e8d raspberrypifw: 1.20170427 -> 1.20170515 2017-07-31 19:47:23 +03:00
Franz Pletz
ee8df19a25
batman-adv: 2017.1 -> 2017.2 2017-07-31 12:23:14 +02:00
aszlig
979817d153
linux-testing: 4.13-rc2 -> 4.13-rc3
Tested via building the linux_testing attribute, but didn't test it at
runtime (yet).

Diffed unpacked tarball against my local git clone and the contents
match.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2017-07-31 09:39:42 +02:00
Robin Gloster
a974ee0188
tcp_wrappers: fix weird use of STRINGS in the Makefile 2017-07-30 14:03:31 +02:00
Frederik Rietdijk
20b8e4b4cf Merge remote-tracking branch 'upstream/master' into HEAD 2017-07-30 08:09:11 +02:00
Nikolay Amiantov
69e24c044a kbd: fix build 2017-07-30 01:33:26 +03:00
Nikolay Amiantov
373a623daa Revert "Revert "kbd: 2.0.3 -> 2.0.4""
This reverts commit 00bf3a9dca.
2017-07-30 01:21:44 +03:00