Commit Graph
33 Commits
Author SHA1 Message Date
Pierre Bourdon d21e4f1ab4 tpm2-tools: init at 3.1.3 2019-02-19 20:02:31 +01:00
Pierre Bourdon 0cb599293b tpm2-tss: init at 2.2.0 2019-02-19 20:02:31 +01:00
Pierre Bourdon 67d912af0a ibm-sw-tpm2: init at 1332 2019-02-19 20:02:31 +01:00
Pierre Bourdon a13a0d7868 electrum: 3.3.2 -> 3.3.4 2019-02-19 17:01:57 +01:00
Pierre Bourdon 705167a5dc unzip: patch CVE-2018-18384
Patch from https://sourceforge.net/p/infozip/bugs/53/
2019-02-17 05:55:30 +01:00
Pierre Bourdon da9fdcb1f0 libu2f-host: 1.1.6 -> 1.1.7 (CVE-2018-20340) 2019-02-11 21:03:06 +01:00
Pierre Bourdon a8da72b012 nixos/tests/postgresql: fix regression from #55106 2019-02-04 03:56:43 +01:00
Pierre Bourdon 25c2d1cd3e glowing-bear: init at 0.7.1 2019-02-03 19:39:59 +01:00
Pierre Bourdon 3674bdf204 nixos/tasks/encrypted-devices: fix regression from #54637
27982b408e introduced a bug when
refactoring the encrypted-devices module, causing some encrypted
filesystem options to not be recognized anymore.

See e.g. https://hydra.nixos.org/build/88145490
2019-02-02 17:31:31 +01:00
Pierre Bourdon 20b1febace nixos/tests: add nginx-sso basic functionality test 2019-01-29 19:54:14 +01:00
Pierre Bourdon 43fcfc274d nixos: add nginx-sso service 2019-01-29 19:54:14 +01:00
Pierre Bourdon aa000aa3a0 nginx-sso: init at 0.15.1 2019-01-29 19:52:48 +01:00
Pierre Bourdon b26c824da3 Revert "Revert "Revert "linux-hardened: Disable GCC_PLUGIN_RANDSTRUCT"""
The issue with out-of-tree modules has been addressed and the feature
should now be good to re-enable again.

This reverts commit 865f7a14b4.
2019-01-11 12:35:16 +01:00
Pierre Bourdon 1b9bf8fa75 kernel: make the RANDSTRUCT seed deterministic 2019-01-11 12:35:16 +01:00
Pierre Bourdon 0f7ca26a48 kernel/hardened-config.nix: add STACKLEAK plugin on 4.20+ 2019-01-04 22:24:50 +01:00
Pierre Bourdon 9dc0d94896 kernel/hardened-config.nix: re-enable GCC plugins 2019-01-04 22:24:50 +01:00
Pierre Bourdon c789f642f0 kernel/generic.nix: provide required dependencies for GCC plugins builds 2019-01-04 22:24:50 +01:00
Pierre Bourdon d132c08aa1 wget: 1.20 -> 1.20.1 (CVE-2018-20483) 2018-12-29 13:00:58 +01:00
Pierre Bourdon 3873f43fc3 prometheus/exporters: fix regression in DynamicUser behavior
Instead of setting User/Group only when DynamicUser is disabled, the
previous version of the code set it only when it was enabled. This
caused services with DynamicUser enabled to actually run as nobody, and
services without DynamicUser enabled to run as root.

Regression from fbb7e0c82f.
2018-12-05 11:26:38 +01:00
Pierre Bourdon 199b4c4743 prometheus/exporters/tor: make CPython happy by defining $HOME 2018-12-05 11:26:38 +01:00
Pierre Bourdon ec3d829257 php72: 7.2.11 -> 7.2.12 2018-11-27 02:56:22 +01:00
Pierre Bourdon 8221da343e php71: 7.1.23 -> 7.1.24 2018-11-27 02:56:22 +01:00
Pierre Bourdon ea10173045 php: align Darwin and Linux versions again
Instead of pinning Darwin to older versions, add small patches to
configure.in (7.1) / configure.ac (7.2) to fix the build of the intl
extension on recent PHP versions on Darwin.

fix-paths-php7.patch also required changes -- since we now run autoconf
at build time (through ./buildconf), it needs to patch the input .m4
files instead of ./configure directly.
2018-11-27 02:56:17 +01:00
Pierre Bourdon 90720d0139 curl: cherry-pick upstream patch for ipv6 url parsing
Upstream bug: curl/curl#3218.

This causes nixos/tests/ipv6.nix to fix since the last staging merge.
2018-11-22 09:58:34 +01:00
Pierre Bourdon 2f11166f43 kpcli: fix wrong program name in prompt (#50845) 2018-11-20 18:46:19 +01:00
Pierre Bourdon 74598ca8d3 nixos.tests.keymap: use new name of the colemak/en-latin9 keymap
Commit f1987fb58f renamed colemak/en-latin9 to
colemak/colemak, but the keymap test wasn't adjusted to refer to the new path.
2018-11-20 04:11:39 +01:00
Pierre Bourdon 6b1d3dc590 doc/reviewing-contributions: fix build error
Regression from #50674. Section IDs cannot contain spaces.
2018-11-20 03:46:34 +01:00
Pierre Bourdon 08f24cadaa syncthing-relay module: init 2018-11-19 01:09:54 +01:00
Pierre Bourdon cf58856d90 nixos/prometheus: add webExternalUrl option
Similar to the prometheus.alertmanager.webExternalUrl option, but for
Prometheus itself.
2018-10-20 13:45:55 +02:00
Pierre Bourdon 259cf8812b dolphin-emu: fix metadata (GPLv2 -> GPLv2+, http -> https)
Dolphin has been GPLv2+ since 2015.
2018-10-15 03:28:17 +02:00
Pierre Bourdon 01d1f77681 tests/prometheus-exporters: add new Tor exporter
This new exporter was added in #48307.
2018-10-14 20:12:07 -05:00
Pierre Bourdon 86d644f8cc prometheus-tor-exporter: init at 0.3
Upstream: https://github.com/atx/prometheus-tor_exporter
2018-10-13 10:10:29 +02:00
Pierre Bourdon 5410e6b6b6 maintainers: add delroth 2018-10-13 10:10:29 +02:00