public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
105,994 Commits 1 Branch 0 Tags
176ca2aac84087d32f4e7aebb43799df0efe3dec
Commit Graph
105994 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Joachim Fasting 063ac40304 nixos: add a "hardened" profile 
The idea is to provide a convenient way to enable most vanilla hardening
features in one go.  The hardened profile, then, will serve as a place for
features that enhance security but cannot be enabled for all deployments
because they interfere with legitimate use cases (e.g., using ptrace to
debug problems in an already running process).

Closes https://github.com/NixOS/nixpkgs/pull/24680
 2017-04-23 11:00:52 +02:00
Joachim Fasting 1b3300bf01 nixos/tests/misc: check hidepid mount via /proc/mounts 2017-04-23 11:00:46 +02:00
Kevin Cox 32d649eb80 etcd: 3.0.6 -> 3.1.6 
Upgrade etcd.

- Switches from their old dependency version system to their vendored packages.
- Fixes SSL support.
 2017-04-23 09:26:57 +01:00
taku0 a68f95da17 firefox: 52.0.2 -> 53.0 2017-04-23 11:50:33 +09:00
taku0 5bcaeda4c8 hunspell: 1.3.3 -> 1.6.1 2017-04-23 11:42:59 +09:00
Rok Garbas 0feca1abb6 Merge pull request #25135 from garbas/update-asciinema 
Update asciinema
 2017-04-23 04:33:27 +02:00
Rok Garbas 93cacf61a8 asciinema: 1.3.0 -> 1.4.0 2017-04-23 04:18:11 +02:00
Cray Elliott df86c9731b ripgrep: 0.5.0 -> 0.5.1 2017-04-22 19:03:09 -07:00
Michael Weiss e1244f6e8a Revert "display-manager: fix argument handling of sddm" 
This reverts commit 6b7c5ba535.

Unfortunately it seems like this broke slim, lightdm and gdm (see #25068
and #23264). This is already reverted in the 17.03 branch (99dfb6d).

TODO: We need tests for slim and lightdm and fix the test for gdm
(failing since 2016-10-26) to prevent such breakage in the future.
 2017-04-23 03:19:07 +02:00
Graham Christensen 55d4d50cd3 rt: improve packaging, with a progress note 2017-04-22 16:24:33 -04:00
Graham Christensen 46f952371e perlPackages.DataPagePageset: init at 1.02 2017-04-22 16:24:30 -04:00
Graham Christensen b48ea664f5 perlPackages.MIMETools: init at 5.509 2017-04-22 16:24:26 -04:00
Graham Christensen 38574a5878 perlPackages.GDGraph: init at 1.54 2017-04-22 16:24:23 -04:00
Graham Christensen 2d65b7f251 perlPackages.JavaScriptMinifierXS: init at 0.11 2017-04-22 16:24:10 -04:00
Graham Christensen 2f1ef64492 perlPackages.GDText: init at 0.86 2017-04-22 16:08:56 -04:00
Graham Christensen a9f8912845 perlPackages.CSSMinifierXP: init at 1.02 2017-04-22 16:08:11 -04:00
Graham Christensen 76cea3de93 perlPackages.BusinessHours: init at 0.12 2017-04-22 16:07:25 -04:00
Thomas Tuegel e019978d02 Merge pull request #23922 from gnidorah/master 
mytetra: init at 1.42.2
 2017-04-22 15:06:44 -05:00
Graham Christensen 0ceb82d3dd perlPackages.SetIntSpan: init at 1.19 2017-04-22 16:05:07 -04:00
Domen Kožar e30b5c198a Merge pull request #25118 from dmjio/patch-1 
HaLVM: Shebang fix for Hydra
 2017-04-22 20:13:24 +02:00
Richard Lupton 69ed7f6e12 emacs-all-the-icons-fonts: init at 2.5.0 2017-04-22 18:54:51 +01:00
David Johnson bcd5865adf HaLVM: Shebang fix for Hydra 
On my local nixos machine, `useSandbox = true;` wasn't enabled. This exposed the fact that various scripts weren't shebang-patched. @cleverca22 has provided the fix.

cc @peti @domenkozar @Ericson2314
 2017-04-22 10:33:01 -07:00
Richard Szibele 5f9096a033 curlcpp: 20160901 -> 1.0 (#25104) 2017-04-22 16:14:32 +01:00
Vladimír Čunát b72d4e13c7 kdiff3: fixup patch hash after #25059 
I'm sorry; not sure why the hash didn't match;
I probably kept the hash of an older version by mistake.
 2017-04-22 16:37:48 +02:00
Joachim Fasting 9e6c96f8fc grsecurity: 4.9.24-201704210851 -> 4.9.24-2201704220732 2017-04-22 16:37:24 +02:00
Pascal Bach d609a5eb5c gitlab-runner_1_11: 1.11.1 -> 1.11.2 2017-04-22 14:11:07 +02:00
Pascal Bach be463abc10 gitlab-runner: 9.0.0 -> 9.1.0 2017-04-22 14:10:48 +02:00
Vladimír Čunát 5cdf192827 Merge #25043: firefox-{bin,esr}: critical security 2017-04-22 11:51:02 +02:00
Edward Tjörnhammar da2518fe25 i2pd: 0.12.0 -> 0.13.0 2017-04-22 09:43:24 +02:00
Edward Tjörnhammar ad84b1e4b9 jackett: 0.7.1197 -> 0.7.1308 2017-04-22 09:43:00 +02:00
romildo 2f481960cf ephoto: init at 1.0 2017-04-22 03:06:12 +03:00
obadz c8788f4e7b python2Packages.pyspread: init at 1.1 2017-04-22 00:27:40 +01:00
obadz a5cb00e884 pythonPackages.wxPython: inject Cairo, Pango and GDK library paths 2017-04-21 23:51:39 +01:00
Benno Fünfstück cfcceaee27 Merge pull request #24473 from jgertm/tj/xsv 
xsv: init at 0.11.0
 2017-04-22 00:26:10 +02:00
Benno Fünfstück 1db5cf49d3 Merge pull request #24479 from Ma27/init/lambda-mod-zsh-theme 
lambda-mod-zsh-theme: init at eceee68cf46bba9f7f42887c2128b48e8861e31b
 2017-04-22 00:10:14 +02:00
Benno Fünfstück 855155083a Merge pull request #24755 from LumiGuide/bepasty-secretKeyFile 
bepasty: add secretKeyFile option
 2017-04-22 00:07:04 +02:00
Benno Fünfstück a0e60af067 Merge pull request #24819 from dbrock/ethrun 
ethrun: init at 0.1.0
 2017-04-21 23:54:07 +02:00
Eelco Dolstra d387a1f0ae youtube-dl: 2017.04.02 -> 2017.04.17 2017-04-21 23:32:37 +02:00
Benno Fünfstück bd78749d33 rust: improve fetch-cargo-deps determinism for non-sandboxed builds 
When not using sandboxing, /usr/share/git-core/templates may leak into the
nix build through the libgit2 hardcoded default template search path. We now
explictly set the templatedir to avoid this problem.

See https://github.com/bennofs/nix-index/issues/2#issuecomment-296268983 for
an example case of nondeterminism.
 2017-04-21 23:26:46 +02:00
Daiderd Jordan 5238b85207 Merge pull request #25069 from matthewbauer/libbsd-darwin 
libbsd: fixup on darwin
 2017-04-21 22:55:08 +02:00
obadz c4fecfb1ec ecryptfs-helper: fix makeWrapper use after 7ff6eec5 2017-04-21 21:25:30 +01:00
obadz dbb06ea3d2 pythonPackages.typeguard: init at 2.3.1 (#25040) 2017-04-21 21:20:49 +01:00
Frederik Rietdijk c6b3c66277 wineUnstable: 2.5 -> 2.6 2017-04-21 21:38:54 +02:00
Frederik Rietdijk d16a4512d0 wine: 2.0 -> 2.0.1 2017-04-21 21:38:54 +02:00
Eelco Dolstra 20647f8a8e Merge pull request #25091 from joepie91/patch-2 
fetchurl: fixed typo in error message
 2017-04-21 17:54:06 +02:00
Peter Hoeg 6695c95ebd unifi: 5.4.11 -> 5.4.14 2017-04-21 23:13:47 +08:00
Chris Hodapp 5864baa4c6 mapnik: add optional PostgreSQL dependency 
Closes #25063.
 2017-04-21 16:50:43 +02:00
Jörg Thalheim f88085d45f Merge pull request #25089 from Mic92/dino 
dino: disable parallel build
 2017-04-21 16:45:39 +02:00
Sven Slootweg fa8adf2c47 fetchurl: fixed typo in error message 
This typo was likely introduced by copy-pasting the error message from elsewhere and forgetting to change the text, during the MD5 deprecation process (#4491).
 2017-04-21 16:41:09 +02:00
Jörg Thalheim 95d9b582f1 dino: disable parallel build 
attempt to fix hydra build: https://hydra.nixos.org/build/51816616/nixlog/1
 2017-04-21 16:26:29 +02:00