Pierre Bourdon
d21e4f1ab4
tpm2-tools: init at 3.1.3
2019-02-19 20:02:31 +01:00
Pierre Bourdon
0cb599293b
tpm2-tss: init at 2.2.0
2019-02-19 20:02:31 +01:00
Pierre Bourdon
67d912af0a
ibm-sw-tpm2: init at 1332
2019-02-19 20:02:31 +01:00
Pierre Bourdon
a13a0d7868
electrum: 3.3.2 -> 3.3.4
2019-02-19 17:01:57 +01:00
Pierre Bourdon
705167a5dc
unzip: patch CVE-2018-18384
...
Patch from https://sourceforge.net/p/infozip/bugs/53/
2019-02-17 05:55:30 +01:00
Pierre Bourdon
da9fdcb1f0
libu2f-host: 1.1.6 -> 1.1.7 (CVE-2018-20340)
2019-02-11 21:03:06 +01:00
Pierre Bourdon
a8da72b012
nixos/tests/postgresql: fix regression from #55106
2019-02-04 03:56:43 +01:00
Pierre Bourdon
25c2d1cd3e
glowing-bear: init at 0.7.1
2019-02-03 19:39:59 +01:00
Pierre Bourdon
3674bdf204
nixos/tasks/encrypted-devices: fix regression from #54637
...
27982b408e introduced a bug when
refactoring the encrypted-devices module, causing some encrypted
filesystem options to not be recognized anymore.
See e.g. https://hydra.nixos.org/build/88145490
2019-02-02 17:31:31 +01:00
Pierre Bourdon
20b1febace
nixos/tests: add nginx-sso basic functionality test
2019-01-29 19:54:14 +01:00
Pierre Bourdon
43fcfc274d
nixos: add nginx-sso service
2019-01-29 19:54:14 +01:00
Pierre Bourdon
aa000aa3a0
nginx-sso: init at 0.15.1
2019-01-29 19:52:48 +01:00
Pierre Bourdon
b26c824da3
Revert "Revert "Revert "linux-hardened: Disable GCC_PLUGIN_RANDSTRUCT"""
...
The issue with out-of-tree modules has been addressed and the feature
should now be good to re-enable again.
This reverts commit 865f7a14b4 .
2019-01-11 12:35:16 +01:00
Pierre Bourdon
1b9bf8fa75
kernel: make the RANDSTRUCT seed deterministic
2019-01-11 12:35:16 +01:00
Pierre Bourdon
0f7ca26a48
kernel/hardened-config.nix: add STACKLEAK plugin on 4.20+
2019-01-04 22:24:50 +01:00
Pierre Bourdon
9dc0d94896
kernel/hardened-config.nix: re-enable GCC plugins
2019-01-04 22:24:50 +01:00
Pierre Bourdon
c789f642f0
kernel/generic.nix: provide required dependencies for GCC plugins builds
2019-01-04 22:24:50 +01:00
Pierre Bourdon
d132c08aa1
wget: 1.20 -> 1.20.1 (CVE-2018-20483)
2018-12-29 13:00:58 +01:00
Pierre Bourdon
3873f43fc3
prometheus/exporters: fix regression in DynamicUser behavior
...
Instead of setting User/Group only when DynamicUser is disabled, the
previous version of the code set it only when it was enabled. This
caused services with DynamicUser enabled to actually run as nobody, and
services without DynamicUser enabled to run as root.
Regression from fbb7e0c82f .
2018-12-05 11:26:38 +01:00
Pierre Bourdon
199b4c4743
prometheus/exporters/tor: make CPython happy by defining $HOME
2018-12-05 11:26:38 +01:00
Pierre Bourdon
ec3d829257
php72: 7.2.11 -> 7.2.12
2018-11-27 02:56:22 +01:00
Pierre Bourdon
8221da343e
php71: 7.1.23 -> 7.1.24
2018-11-27 02:56:22 +01:00
Pierre Bourdon
ea10173045
php: align Darwin and Linux versions again
...
Instead of pinning Darwin to older versions, add small patches to
configure.in (7.1) / configure.ac (7.2) to fix the build of the intl
extension on recent PHP versions on Darwin.
fix-paths-php7.patch also required changes -- since we now run autoconf
at build time (through ./buildconf), it needs to patch the input .m4
files instead of ./configure directly.
2018-11-27 02:56:17 +01:00
Pierre Bourdon
90720d0139
curl: cherry-pick upstream patch for ipv6 url parsing
...
Upstream bug: curl/curl#3218 .
This causes nixos/tests/ipv6.nix to fix since the last staging merge.
2018-11-22 09:58:34 +01:00
Pierre Bourdon
2f11166f43
kpcli: fix wrong program name in prompt ( #50845 )
2018-11-20 18:46:19 +01:00
Pierre Bourdon
74598ca8d3
nixos.tests.keymap: use new name of the colemak/en-latin9 keymap
...
Commit f1987fb58f renamed colemak/en-latin9 to
colemak/colemak, but the keymap test wasn't adjusted to refer to the new path.
2018-11-20 04:11:39 +01:00
Pierre Bourdon
6b1d3dc590
doc/reviewing-contributions: fix build error
...
Regression from #50674 . Section IDs cannot contain spaces.
2018-11-20 03:46:34 +01:00
Pierre Bourdon
08f24cadaa
syncthing-relay module: init
2018-11-19 01:09:54 +01:00
Pierre Bourdon
cf58856d90
nixos/prometheus: add webExternalUrl option
...
Similar to the prometheus.alertmanager.webExternalUrl option, but for
Prometheus itself.
2018-10-20 13:45:55 +02:00
Pierre Bourdon
259cf8812b
dolphin-emu: fix metadata (GPLv2 -> GPLv2+, http -> https)
...
Dolphin has been GPLv2+ since 2015.
2018-10-15 03:28:17 +02:00
Pierre Bourdon
01d1f77681
tests/prometheus-exporters: add new Tor exporter
...
This new exporter was added in #48307 .
2018-10-14 20:12:07 -05:00
Pierre Bourdon
86d644f8cc
prometheus-tor-exporter: init at 0.3
...
Upstream: https://github.com/atx/prometheus-tor_exporter
2018-10-13 10:10:29 +02:00
Pierre Bourdon
5410e6b6b6
maintainers: add delroth
2018-10-13 10:10:29 +02:00