JakeHillion/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
a927709a35
nixpkgs/pkgs/tools/networking
History
Rickard Nilsson a927709a35 openssh: Use the default privilege separation dir (/var/empty) 
If running NixOS inside a container where the host's root-owned files
and directories have been mapped to some other uid (like nobody), the
ssh daemon fails to start, producing this error message:

fatal: /nix/store/...-openssh-7.2p2/empty must be owned by root and not group or world-writable.

The reason for this is that when openssh is built, we explicitly set
`--with-privsep-path=$out/empty`. This commit removes that flag which
causes the default directory /var/empty to be used instead. Since NixOS'
activation script correctly sets up that directory, the ssh daemon now
also works within containers that have a non-root-owned nix store.
2016-07-14 20:54:06 +02:00
..
ahcpd Turn some license strings into lib.licenses values 2014-07-28 11:31:14 +02:00
aiccu aiccu: patch gnutls api change 2015-07-21 10:48:36 +02:00
aircrack-ng rename iElectric to domenkozar to match GitHub 2016-05-17 13:00:47 +01:00
airfield Replace 'with plaforms; platform' with 'platforms.platform' 2015-11-17 21:30:43 +01:00
altermime altermime: use mkDerivation 2016-01-30 20:31:05 +00:00
aria2 aria2: 1.23.0 -> 1.24.0 2016-06-21 09:44:23 +08:00
asynk 2.0.0-rc2 -> 2.0.0, add CardDAV support 2015-03-05 13:23:02 -07:00
atftp replace ${stdenv.cc.cc}/lib occurences 2016-05-01 00:13:23 +03:00
autossh autossh: build on darwin too 2015-12-26 13:46:34 -08:00
axel axel: 2.6 -> 2.7 2016-05-12 20:37:04 +02:00
babeld babeld: 1.6.1 -> 1.7.1 2016-02-16 05:12:56 +01:00
badvpn Update badvpn 2015-05-10 13:46:31 +02:00
biosdevname Fix lots of fetchgit hashes (fallout from #15469) 2016-06-03 17:17:08 +03:00
bsd-finger
bud Fix lots of fetchgit hashes (fallout from #15469) 2016-06-03 17:17:08 +03:00
bully bully: switch to working Lrs121 mirror + fetchFromGitHub 2015-02-25 16:27:03 +01:00
bwm-ng bwm_ng: Move version to own variable 2015-09-25 15:33:42 +02:00
cadaver cadaver: fix build against newer versions of openssl 2016-03-24 19:05:14 +01:00
carddav-util Add carddav-util 2015-06-08 18:03:41 +02:00
ccnet seafile-*: 4.4.2 -> 5.0.7 2016-04-23 12:52:42 +12:00
chrony chrony: 2.2 -> 2.3 2016-02-27 18:00:07 +01:00
cjdns Merge branch 'master' into closure-size 2016-04-10 11:17:52 +02:00
cksfv Set some meta.platforms 2015-03-20 20:04:42 +01:00
cmst cmst: move to qmakeHook 2016-04-20 18:55:56 +03:00
cntlm cntlm: 0.35.1 -> 0.92.3 2015-11-28 23:46:52 +01:00
connect connect 1.104 2014-12-23 09:07:39 -06:00
connman connman: make dependency on awk explicit 2016-05-03 20:10:58 +02:00
connman_dmenu connman-dmenu: init at git-29-9-2015 2016-02-28 05:18:35 +01:00
connmanui Fix lots of fetchgit hashes (fallout from #15469) 2016-06-03 17:17:08 +03:00
corkscrew corkscrew: fix darwin build 2015-12-13 14:31:00 -08:00
curl treewide: Make explicit that 'dev' output of openssl is used 2016-05-19 10:02:23 +02:00
curl-unix-socket Replace 'with plaforms; platform' with 'platforms.platform' 2015-11-17 21:30:43 +01:00
cutter cutter: update from 1.03 to 1.04 2015-10-25 19:06:05 +01:00
darkstat Don't use "with licenses;" for single licences 2015-05-28 19:20:29 +02:00
davix New expression for the davix toolkit 2015-06-11 22:57:13 +02:00
dd-agent rename iElectric to domenkozar to match GitHub 2016-05-17 13:00:47 +01:00
ddclient ddclient: Fix build after multiple outputs merge 2016-04-28 20:48:33 +03:00
dhcp dhcp: 4.3.2 -> 4.3.3 2015-09-17 14:12:38 -07:00
dhcpcd dhcpcd: 6.9.4 -> 6.10.1 (security) 2016-03-30 06:57:59 +02:00
dhcpdump dhcpdump: add the tool 2015-02-18 11:52:20 +03:00
dhcping Add version attribute where maintainers |= nckx 2016-01-25 17:35:21 +01:00
dnscrypt-proxy dnscrypt-proxy: minor refactor 2016-05-06 01:57:08 +02:00
dnscrypt-wrapper dnscrypt-wrapper: 0.2 -> 0.2.1 2016-06-14 14:22:18 +02:00
dnsmasq dnsmasq: 2.75 -> 2.76 (security) 2016-07-10 10:48:10 +02:00
dnstop dnstop: Update to 20140915 2015-06-08 17:59:09 -07:00
driftnet Remove all dots at end of descriptions 2016-02-27 17:30:29 +00:00
dropbear dropbear: disable on Darwin 2016-06-11 03:38:57 +03:00
easyrsa treewide: Mass replace 'openssl}/bin' to refer to the correct outputs 2016-04-14 08:32:20 +03:00
eggdrop eggdrop: fix build with gcc5 2016-03-25 19:57:07 +01:00
email email: init at d9fd259f 2016-01-31 17:36:26 -05:00
fdm fdm: 1.7 -> 1.8 2014-12-31 21:20:39 +03:00
filegive filegive: move from googlecode to github 2015-08-15 21:04:32 +02:00
flannel Moving from fetchgit generated by go2nix to fetchFromGitHub where rev is 2016-06-09 13:08:10 +02:00
flvstreamer Fix many package descriptions 2014-08-24 22:31:37 +02:00
fping fping: 3.10 -> 3.13 2016-05-03 16:15:20 +02:00
gandi-cli gandi-cli: pull out of python-packages.nix 2016-05-03 18:28:23 +02:00
getmail rename iElectric to domenkozar to match GitHub 2016-05-17 13:00:47 +01:00
gftp Turn some license strings into lib.licenses values 2014-07-28 11:31:14 +02:00
gmvault buildPythonApplication: use new function for Python applications 2016-02-19 13:16:41 +01:00
gupnp-tools Merge branch 'staging' into closure-size 2016-01-19 09:55:31 +01:00
gvpe gvpe: reimpleemnt using mkDerivation 2015-11-24 14:45:15 +01:00
hans Add version attribute where maintainers |= nckx 2016-01-25 17:35:21 +01:00
haproxy haproxy: 1.6.5 -> 1.6.6 (security) 2016-07-10 10:46:22 +02:00
horst horst: 2015-07-22 -> 2016-03-15 2016-03-21 22:07:25 +01:00
host Set some meta.platforms 2015-03-20 20:04:42 +01:00
hping hping: set platforms = all 2015-04-11 15:25:11 +02:00
http-prompt http-prompt: init at 0.2.0 2016-05-28 14:04:20 +02:00
httpie httpie: 0.9.2 -> 0.9.3 (#16067) 2016-06-08 16:38:08 +01:00
httping More version attribute tidying where maintainers |= nckx 2016-01-25 20:08:34 +01:00
httptunnel Added httptunnel package. 2014-09-17 19:55:45 +02:00
hyenae Turn some license strings into lib.licenses values 2014-07-28 11:31:14 +02:00
i2p i2p: 0.9.25 -> 0.9.26 2016-06-12 21:51:04 +02:00
i2pd i2pd: 2.7.0 -> 2.8.0 2016-06-21 15:03:59 +02:00
iftop iftop: 0.17 -> 1.0pre4 2015-10-25 02:44:46 +03:00
imapproxy Turn some license strings into lib.licenses values 2014-07-28 11:31:14 +02:00
imapsync imapsync: add missing dependencies 2016-05-09 16:08:36 +02:00
inadyn inadyn: update to 1.99.15 2016-01-15 16:14:40 +01:00
inetutils ncurses: split into multiple outputs 2015-10-13 20:18:44 +02:00
iodine iodine: fix ifconfig path patch 2015-09-07 05:48:54 +10:00
ip2location Add version attribute where maintainers |= nckx 2016-01-25 17:35:21 +01:00
ipcalc add ipcalc 2015-06-20 10:24:19 +01:00
iperf iperf3: 3.1 -> 3.1.3 2016-06-27 00:11:16 +02:00
ipv6calc Add version attribute where maintainers |= nckx 2016-01-25 17:35:21 +01:00
isync Fix lots of fetchgit hashes (fallout from #15469) 2016-06-03 17:17:08 +03:00
jnettop Fix many package descriptions 2014-08-24 22:31:37 +02:00
jwhois jwhois: fix path to lynx in $lynx/etc/jwhois.conf 2015-07-30 15:52:28 +02:00
keepalived Captialize meta.description of all packages 2016-06-20 13:55:52 +02:00
lftp lftp: 4.6.4 -> 4.7.1 2016-05-03 16:15:20 +02:00
libreswan libreswan: security update 3.16 -> 3.17 2016-05-24 10:37:10 +02:00
linkchecker linkchecker: init at 9.3 2016-05-27 15:07:05 +08:00
logmein-hamachi logmein-hamachi: init at 2.1.0.139, add nixos service 2016-04-27 16:15:01 +03:00
lsh lsh: fix gcc5 build 2016-03-28 19:01:58 +02:00
maildrop Don't use "with licenses;" for single licences 2015-05-28 19:20:29 +02:00
mailsend Merge branch 'master' into staging 2016-05-26 16:50:22 +02:00
mailutils mailutils: fix build break 2016-07-03 22:50:39 -07:00
maphosts maphosts: Don't provide bundler anymore 2016-07-03 17:59:23 +02:00
megatools glib-networking: split the dev output 2015-10-13 20:18:56 +02:00
minidlna minidlna: install manpages 2016-04-08 23:04:12 +02:00
minissdpd minissdpd: 1.5.20160301 -> 1.5.20160301 2016-03-24 21:33:18 +01:00
miniupnpc tree-wide: various cleanups 2016-01-02 11:29:45 +01:00
miniupnpd miniupnpd: 1.9.20160222 -> 2.0 2016-04-22 17:11:20 +02:00
modemmanager More libgudev dependencies 2015-09-11 12:22:27 +02:00
mosh mosh: fix segfaulting issue 2016-04-04 15:14:09 +02:00
mpack Captialize meta.description of all packages 2016-06-20 13:55:52 +02:00
mtr Remove no longer (or never) referenced patches 2016-01-24 02:02:21 +01:00
mu mu: fix build of webkit support and re-enable it 2016-07-11 10:37:31 +02:00
nbd Captialize meta.description of all packages 2016-06-20 13:55:52 +02:00
nc6 Adding an extra url for nc6. The previous was failing. 2014-10-24 23:14:35 +02:00
ncftp Ncftp manpage /usr/local workaround 2015-11-22 14:16:35 -06:00
ndisc6 ndisc6: 1.0.2 -> 1.0.3 2015-04-04 20:45:20 -07:00
ndjbdns Fixed many descriptions 2014-11-11 14:36:34 +01:00
netboot Turn more licenses into lib.licenses style 2014-11-06 00:48:16 +00:00
netcat netcat: add meta data 2016-01-02 22:49:57 +01:00
netcat-openbsd Fixed many descriptions 2014-11-11 14:36:34 +01:00
nethogs nethogs: 0.8.1 -> 0.8.5 2016-07-13 13:17:24 +02:00
netkit/tftp Turn more licenses into lib.licenses style 2014-11-06 00:48:16 +00:00
netrw More description fixes 2013-10-06 12:01:38 +02:00
netselect
netsniff-ng Merge branch 'master' into closure-size 2016-04-01 10:06:01 +02:00
network-manager Merge pull request #16467 from groxxda/bump/networkmanager 2016-06-23 23:41:44 +01:00
network-manager-applet network-manager-applet: remove unused dbus_glib dependency 2016-06-23 23:12:41 +02:00
ngrep ngrep: fix build by using make-3 2015-04-01 08:41:45 +02:00
ngrok no more goPackages 2016-06-09 13:08:00 +02:00
noip Remove unnecessary conditional 2015-02-27 17:29:58 +00:00
nss-mdns Turn some license strings into lib.licenses values 2014-07-28 11:31:14 +02:00
nss-pam-ldapd Don't use "with licenses;" for single licences 2015-05-28 19:20:29 +02:00
ntopng ntopng: prefer nixpkgs over in-tree deps 2016-05-11 19:33:08 -04:00
ntp ntp: 4.2.8p6 -> 4.2.8p8 (security) 2016-07-10 10:48:11 +02:00
nylon libevent: split into multiple outputs 2015-10-05 15:58:37 +02:00
nzbget nzbget: 16.4 -> 17.0-r1686 and nzbget service 2016-05-13 18:56:39 +02:00
ocproxy ocproxy: init at 1.50 2016-07-13 17:15:23 +03:00
offlineimap offlineimap: 6.7.0 -> 6.7.0.1 2016-06-08 06:22:16 +02:00
olsrd olsrd: fix top-level name and directory naming (#15663) 2016-05-24 13:26:30 +02:00
openfortivpn openfortivpn: 1.0.1 -> 1.1.4 2016-06-03 14:19:52 +08:00
openntpd openntpd: Remove output dir hack 2015-04-08 15:11:45 -07:00
openresolv openresolv: 3.5.7 -> 3.7.0 2015-05-20 00:03:48 -07:00
openssh openssh: Use the default privilege separation dir (/var/empty) 2016-07-14 20:54:06 +02:00
openvpn openvpn: 2.3.10 -> 2.3.11 2016-07-09 15:04:55 +02:00
p2p gtk-gnutella: 1.1.5 -> 1.1.9 2016-07-10 11:21:28 +08:00
par2cmdline refactor to use autoreconfHook where possible 2016-01-18 10:45:31 +01:00
pcapc Add version attribute where maintainers |= nckx 2016-01-25 17:35:21 +01:00
pcapfix pcapfix: init at 1.1.0 2016-04-22 11:34:45 +02:00
pdnsd pdnsd: enable IPv6 by default 2016-02-12 19:32:29 +08:00
pdsh Bring my stdenv.lib.maintainers user name in line with my github nick. 2016-05-16 22:49:55 +02:00
philter Remove unneeded 'with's from meta.platforms 2015-11-25 23:06:09 +01:00
pingtcp Fix lots of fetchgit hashes (fallout from #15469) 2016-06-03 17:17:08 +03:00
plasma-nm kde4.plasma-nm: fix build with multiple outputs 2015-12-05 13:27:24 +01:00
polygraph polygraph: new package 2015-02-12 14:29:10 +01:00
ppp Merge branch 'master' into closure-size 2016-04-01 10:06:01 +02:00
pptp pptp: 1.7.2 -> 1.8.0 2016-03-23 23:01:39 +00:00
pptpd pptpd: init at 1.4.0 2016-06-18 02:08:07 +01:00
privoxy privoxy: 3.0.22 - > 3.0.24 2016-01-30 14:21:20 +00:00
proxychains Fix lots of fetchgit hashes (fallout from #15469) 2016-06-03 17:17:08 +03:00
pwnat Turn some license strings into lib.licenses values 2014-07-28 11:31:14 +02:00
quicktun quicktun: init at 2.2.4 2016-02-28 12:23:12 +01:00
radvd radvd: 2.12 -> 2.13 2016-05-13 17:27:59 +02:00
ratools Captialize meta.description of all packages 2016-06-20 13:55:52 +02:00
reaver-wps reaver-wps: set platforms 2015-10-13 14:45:52 +02:00
redir redir: init at 2.2.1 2015-12-10 16:09:32 +00:00
ripmime Remove unneeded 'with's from meta.platforms 2015-11-25 23:06:09 +01:00
rp-pppoe rp-pppoe: 3.11 -> 3.12 2015-11-23 11:56:03 +00:00
s3cmd s3cmd: 1.5.2 -> 1.6.1 2016-03-25 05:19:35 +00:00
s3gof3r no more goPackages 2016-06-09 13:08:00 +02:00
s6-dns Fix lots of fetchgit hashes (fallout from #15469) 2016-06-03 17:17:08 +03:00
s6-networking Fix lots of fetchgit hashes (fallout from #15469) 2016-06-03 17:17:08 +03:00
samplicator
shadowsocks-libev shadowsocks-libev: polarssl is now called mbedtls 2016-07-10 10:26:14 +02:00
siege siege: 4.0.1 -> 4.0.2 2016-07-12 13:31:31 +08:00
sipcalc add sipcalc 2015-06-20 10:24:19 +01:00
sipsak sipsak: fix build by using --std=gnu89 2016-04-16 13:52:21 -04:00
sitecopy
slimrat Fix license attribute of many bsd-like licensed packages 2014-12-21 00:00:35 +01:00
smbldaptools smbldaptools: 0.9.10 -> 0.9.11 2016-07-13 09:01:25 +08:00
snabb rename iElectric to domenkozar to match GitHub 2016-05-17 13:00:47 +01:00
socat socat: add readline support 2016-06-13 12:09:32 +01:00
speedtest-cli rename iElectric to domenkozar to match GitHub 2016-05-17 13:00:47 +01:00
spiped Captialize meta.description of all packages 2016-06-20 13:55:52 +02:00
srelay srelay: init at 0.4.8b6 (#16833) 2016-07-11 03:41:02 +02:00
ssh-ident ssh-ident: init at 2016-04-21 2016-06-19 12:44:46 -07:00
sshpass sshpass: Enable on OS X. 2015-11-19 08:45:54 +01:00
ssmtp Use mirror:// URIs for ftp.debian.org 2015-05-22 10:39:27 +02:00
sstp treewide: Make explicit that 'dev' output of openssl is used 2016-05-19 10:02:23 +02:00
statsd statsd: Don't use <nixpkgs> 2015-12-02 15:58:30 +01:00
strongswan strongswan: 5.3.2 -> 5.4.0 2016-05-24 15:00:49 +02:00
stun Turn more licenses into lib.licenses style 2014-11-06 00:48:16 +00:00
stunnel Captialize meta.description of all packages 2016-06-20 13:55:52 +02:00
surfraw surfraw: add platforms 2013-12-21 02:28:26 +02:00
swaks new package: swaks, a command line SMTP tool 2014-11-05 21:43:25 +01:00
swec use dontBuild instead of hacks 2016-05-04 10:11:04 +00:00
tcpdump Add myself as maintainer 2015-06-22 08:26:09 +02:00
tcpflow tcpflow: 1.4.5 -> 1.4.6 (#15151) 2016-05-03 01:39:46 +01:00
telnet telnet: fix broken download 2014-03-21 12:26:13 +01:00
tftp-hpa Remove unneeded 'with's from meta.platforms 2015-11-25 23:06:09 +01:00
tgt tgt: 1.0.60 -> 1.0.63 2016-05-03 16:15:20 +02:00
tinc Fix lots of fetchgit hashes (fallout from #15469) 2016-06-03 17:17:08 +03:00
tlsdate Fix lots of fetchgit hashes (fallout from #15469) 2016-06-03 17:17:08 +03:00
toxvpn toxvpn: update versions and allow systemd to be optional 2016-06-06 05:00:15 -03:00
tracebox Add libcrafter and tracebox 2015-05-08 13:20:27 +02:00
traceroute traceroute: 2.0.21 -> 2.1.0 (#16809) 2016-07-09 14:40:14 +02:00
trickle Fix license attribute of many bsd-like licensed packages 2014-12-21 00:00:35 +01:00
ucspi-tcp ucspi-tcp: new package 2014-08-10 23:00:42 +02:00
udptunnel Merge remote-tracking branch 'origin/master' into staging. 2014-08-04 16:51:47 +02:00
uget uget: 2.0.5 -> 2.0.8 2016-06-01 08:26:40 -03:00
unbound unbound: 1.5.8 -> 1.5.9 2016-06-21 23:22:18 +02:00
urlwatch urlwatch: 2.1 -> 2.2 2016-07-09 12:16:30 +02:00
uwimap treewide: Make explicit that 'dev' output of openssl is used 2016-05-19 10:02:23 +02:00
vde2 Revert "vde2: support static build" 2016-01-12 17:15:14 +03:00
vlan
vpnc Captialize meta.description of all packages 2016-06-20 13:55:52 +02:00
vtun treewide: Make explicit that 'dev' output of openssl is used 2016-05-19 10:02:23 +02:00
wakelan Turn some license strings into lib.licenses values 2014-07-28 11:31:14 +02:00
wavemon Update wavemon to git version, which has some nl80211 support 2015-10-27 14:21:08 +03:00
wbox
webalizer Move all db4 packages to the default db5 2014-02-15 12:03:02 +01:00
weighttp
wget wget: 1.17.1 -> 1.18 2016-06-20 22:15:46 +02:00
whois whois: 5.2.11 -> 5.2.12 2016-05-31 20:10:26 +02:00
wicd wicd: wicd-curses fix for ... 2016-05-12 03:19:28 +02:00
wolfebin wolfebin: init at 5.4 2015-06-19 12:26:00 -07:00
wrk Fix lots of fetchgit hashes (fallout from #15469) 2016-06-03 17:17:08 +03:00
x11-ssh-askpass x11: replace its usage by xlibsWrapper directly 2015-09-15 12:08:24 +02:00
xl2tpd xl2tpd: 1.3.6 -> 1.3.7 2016-04-30 03:12:34 +03:00
zap zap: update 2.4.3 -> 2.5.0 2016-06-08 20:21:39 +02:00
zerotierone zerotierone: 1.1.6 -> 1.1.12 2016-07-14 14:02:54 +01:00
openconnect.nix libxml2,libxslt: split into multiple outputs 2015-10-05 13:44:16 +02:00