Commit Graph
107253 Commits
Author SHA1 Message Date
Joachim Fasting 063ac40304 nixos: add a "hardened" profile
The idea is to provide a convenient way to enable most vanilla hardening
features in one go.  The hardened profile, then, will serve as a place for
features that enhance security but cannot be enabled for all deployments
because they interfere with legitimate use cases (e.g., using ptrace to
debug problems in an already running process).

Closes https://github.com/NixOS/nixpkgs/pull/24680
2017-04-23 11:00:52 +02:00
Joachim Fasting 1b3300bf01 nixos/tests/misc: check hidepid mount via /proc/mounts 2017-04-23 11:00:46 +02:00
Kevin Cox 32d649eb80 etcd: 3.0.6 -> 3.1.6
Upgrade etcd.

- Switches from their old dependency version system to their vendored packages.
- Fixes SSL support.
2017-04-23 09:26:57 +01:00
taku0 a68f95da17 firefox: 52.0.2 -> 53.0 2017-04-23 11:50:33 +09:00
taku0 5bcaeda4c8 hunspell: 1.3.3 -> 1.6.1 2017-04-23 11:42:59 +09:00
Rok Garbas 0feca1abb6 Merge pull request #25135 from garbas/update-asciinema
Update asciinema
2017-04-23 04:33:27 +02:00
Rok Garbas 93cacf61a8 asciinema: 1.3.0 -> 1.4.0 2017-04-23 04:18:11 +02:00
Cray Elliott df86c9731b ripgrep: 0.5.0 -> 0.5.1 2017-04-22 19:03:09 -07:00
Michael Weiss e1244f6e8a Revert "display-manager: fix argument handling of sddm"
This reverts commit 6b7c5ba535.

Unfortunately it seems like this broke slim, lightdm and gdm (see #25068
and #23264). This is already reverted in the 17.03 branch (99dfb6d).

TODO: We need tests for slim and lightdm and fix the test for gdm
(failing since 2016-10-26) to prevent such breakage in the future.
2017-04-23 03:19:07 +02:00
jeaye ae878851f2 simp_le: 0.1.1 -> 0.2.0
The release is here:
https://github.com/zenhack/simp_le/releases/tag/0.2.0

This is needed, since the existing package is broken. See this
https://github.com/kuba/simp_le/issues/120 for reference.
2017-04-22 17:46:35 -07:00
Jason A. Donenfeld 75608e1bb3 wireguard: 0.0.20170409 -> 0.0.20170421 2017-04-22 23:34:38 +02:00
Graham Christensen 55d4d50cd3 rt: improve packaging, with a progress note 2017-04-22 16:24:33 -04:00
Graham Christensen 46f952371e perlPackages.DataPagePageset: init at 1.02 2017-04-22 16:24:30 -04:00
Graham Christensen b48ea664f5 perlPackages.MIMETools: init at 5.509 2017-04-22 16:24:26 -04:00
Graham Christensen 38574a5878 perlPackages.GDGraph: init at 1.54 2017-04-22 16:24:23 -04:00
Graham Christensen 2d65b7f251 perlPackages.JavaScriptMinifierXS: init at 0.11 2017-04-22 16:24:10 -04:00
Graham Christensen 2f1ef64492 perlPackages.GDText: init at 0.86 2017-04-22 16:08:56 -04:00
Graham Christensen a9f8912845 perlPackages.CSSMinifierXP: init at 1.02 2017-04-22 16:08:11 -04:00
Graham Christensen 76cea3de93 perlPackages.BusinessHours: init at 0.12 2017-04-22 16:07:25 -04:00
Thomas Tuegel e019978d02 Merge pull request #23922 from gnidorah/master
mytetra: init at 1.42.2
2017-04-22 15:06:44 -05:00
Graham Christensen 0ceb82d3dd perlPackages.SetIntSpan: init at 1.19 2017-04-22 16:05:07 -04:00
Vanessa McHale b0c3910972 Init madlang at 2.3.0.3 2017-04-22 14:53:33 -05:00
Simon Vandel Sillesen b538448f39 tvheadend: 4.0.8 -> 4.2.1 2017-04-22 21:10:52 +02:00
mingchuan ca5913bf33 crystal: 0.21.0 -> 0.22.0 2017-04-23 03:01:17 +08:00
Yann Hodique 7e273df818 emacs-macport: align buildInputs and configureFlags on emacs 2017-04-22 11:44:03 -07:00
Yann Hodique d884024d42 emacs: 25.1 -> 25.2 2017-04-22 11:44:03 -07:00
Patrick Mahoney d27e250627 ocamlPackages.lambdaTerm: use buildOcaml
This adds the shared objects setup hook to prepare
CAML_LD_LIBRARY_PATH.
2017-04-22 13:36:23 -05:00
Patrick Mahoney 02682e5093 ocamlPackages.ocaml_lwt: use buildOcaml
This adds the shared objects setup hook to prepare
CAML_LD_LIBRARY_PATH.
2017-04-22 13:33:09 -05:00
Domen Kožar e30b5c198a Merge pull request #25118 from dmjio/patch-1
HaLVM: Shebang fix for Hydra
2017-04-22 20:13:24 +02:00
Richard Lupton 69ed7f6e12 emacs-all-the-icons-fonts: init at 2.5.0 2017-04-22 18:54:51 +01:00
David Johnson bcd5865adf HaLVM: Shebang fix for Hydra
On my local nixos machine, `useSandbox = true;` wasn't enabled. This exposed the fact that various scripts weren't shebang-patched. @cleverca22 has provided the fix.

cc @peti @domenkozar @Ericson2314
2017-04-22 10:33:01 -07:00
Rodney Lorrimar cfa1faa37c gogs service: chmod 440 config file
Directory which contains the config file /var/lib/gogs already
has mode 700 but users are liable to change these things.
2017-04-22 17:51:04 +01:00
Rodney Lorrimar 79d52bc26c gogs service: don't copy database password to nix store
Relevant to #24288
2017-04-22 17:07:21 +01:00
Rodney Lorrimar 0c9512d263 gogs service: fix encoding of secret key
I was getting a secret key like this:

  [security]
  SECRET_KEY = 7X

Use coreutils base64 instead to get the full 256 bits of randomness.
2017-04-22 17:07:20 +01:00
Richard Szibele 5f9096a033 curlcpp: 20160901 -> 1.0 (#25104) 2017-04-22 16:14:32 +01:00
Vladimír Čunát b72d4e13c7 kdiff3: fixup patch hash after #25059
I'm sorry; not sure why the hash didn't match;
I probably kept the hash of an older version by mistake.
2017-04-22 16:37:48 +02:00
Joachim Fasting 9e6c96f8fc grsecurity: 4.9.24-201704210851 -> 4.9.24-2201704220732 2017-04-22 16:37:24 +02:00
Daiderd Jordan 004ecac47b perl: add patch for sw_vers on darwin
Fixes #25090
2017-04-22 15:29:46 +02:00
pajowu b4caf7a11e browserpass: add support for firefox 2017-04-22 15:13:02 +02:00
Pascal Bach d609a5eb5c gitlab-runner_1_11: 1.11.1 -> 1.11.2 2017-04-22 14:11:07 +02:00
Pascal Bach be463abc10 gitlab-runner: 9.0.0 -> 9.1.0 2017-04-22 14:10:48 +02:00
Ismaïl Senhaji 9497aec292 Add Elantech ETPS/2 Trackpoint (ThinkPad Yoga 260) 2017-04-22 13:42:57 +02:00
Armijn Hemel 04a43fdb90 guvcview: 2.0.4 -> 2.0.5 2017-04-22 12:45:35 +02:00
Vladimír Čunát 5cdf192827 Merge #25043: firefox-{bin,esr}: critical security 2017-04-22 11:51:02 +02:00
Emanuele Peruffo 636789c1a9 robomongo: refactor
This revision leaves all robomongo's files under .../sw/lib/robomongo
instead of polluting .../sw/lib with static qt libraries
2017-04-22 10:28:32 +02:00
Edward Tjörnhammar da2518fe25 i2pd: 0.12.0 -> 0.13.0 2017-04-22 09:43:24 +02:00
Edward Tjörnhammar ad84b1e4b9 jackett: 0.7.1197 -> 0.7.1308 2017-04-22 09:43:00 +02:00
romildo 2f481960cf ephoto: init at 1.0 2017-04-22 03:06:12 +03:00
obadz c8788f4e7b python2Packages.pyspread: init at 1.1 2017-04-22 00:27:40 +01:00
obadz a5cb00e884 pythonPackages.wxPython: inject Cairo, Pango and GDK library paths 2017-04-21 23:51:39 +01:00