Commit Graph
204416 Commits
Author SHA1 Message Date
Florian Klink e3907717cc bpython: fix build
aeb63f40dd bumped bpython to 0.18, but it
failed to build afterwards, due to the .desktop file being renamed.
2019-10-31 10:38:37 -07:00
Niklas Hambüchen 62fbcea807 Merge pull request #72057 from nh2/polkit-musl-elogind
musl support for polkit, add elogind
2019-10-31 17:05:42 +01:00
ShaRose 9e2308ed80 nixos/dnsdist: Add CAP_NET_BIND_SERVICE to AmbientCapabilities
It seems that dnsdist doesn't actually request CAP_NET_BIND_SERVICE, which is why normally it's executed and root and setuids to another, unprivileged, user. This means that as it is, dnsdist will be unable to bind to any port under 1024 and will fail with access denied.

Removing CAP_SETGID and CAP_SETUID is also related to this as we don't actually change the uid or gid after the fact as we use DynamicUser. (That part isn't strictly NEEDED but there's no reason to have those capabilities if we don't use them).

There are also some additional sandboxing we can remove from the service definition as they are assumed true or strict by DynamicUser: specifically PrivateTmp and ProtectSystem respectively.

ProtectHome is still there, despite being assumed read-only as setting it to true means they are seen as empty. I don't think it really matters as I don't know if systemd will ignore it or not, but I didn't see any reason to go hunting for excuses to make it a bigger change.
2019-10-31 13:27:55 -02:30
Niklas Hambüchen 1ca49b80cb polkit: Disable systemd support on musl, it needs elogind there 2019-10-31 16:47:00 +01:00
Jan Tojnar 471869c918 Merge pull request #71659 from jtojnar/pyselinux
pythonPackages.libselinux: init
2019-10-31 16:03:13 +01:00
worldofpeace a51ea52f5a Merge pull request #72133 from jtojnar/t-m-c
telepathy-mission-control: 5.16.4 → 5.16.5
2019-10-31 15:02:44 +00:00
Tim Steinbach 8a75eaa6a0 oh-my-zsh: 2019-10-27 -> 2019-10-30 2019-10-31 10:42:54 -04:00
Tim Steinbach f5dadcdb1a vivaldi: 2.8.1664.44-1 -> 2.9.1705.31-1 2019-10-31 10:42:54 -04:00
worldofpeace c613d70550 Merge pull request #72313 from worldofpeace/fixup-twitter-font
twitter-color-emoji: use noto-fonts-emoji’s src
2019-10-31 14:41:47 +00:00
adisbladis bb86d34842 Merge pull request #72255 from max-wittig/patch-4
gitlab-runner: 12.4.0 -> 12.4.1
2019-10-31 14:02:08 +00:00
José Romildo Malaquias 9e37a76608 Merge pull request #72027 from romildo/upd.efl
enlightenment.efl: 1.22.5 -> 1.23.1
2019-10-31 11:01:52 -03:00
worldofpeace d5c639c545 Merge pull request #72281 from peterhoeg/f/geoclue
nixos/geoclue: minor cleanups
2019-10-31 13:58:25 +00:00
Peter Hoeg 0838d6d4cd nixos/geoclue: add worldofpeace as maintainer 2019-10-31 09:57:20 -04:00
worldofpeace e26c2baeae Merge pull request #69030 from jtojnar/contrast
contrast: init at 0.0.2
2019-10-31 13:55:47 +00:00
Jan Tojnar 55191b67a8 contrast: init at 0.0.2 2019-10-31 09:46:15 -04:00
Lancelot SIX ec40f895b9 Merge pull request #72316 from Mic92/radare2
radare2: 3.9.0 -> 4.0.0
2019-10-31 14:15:10 +01:00
Renaud 52adcff30e Merge pull request #72285 from marsam/update-brakeman
brakeman: 4.6.1 -> 4.7.1
2019-10-31 14:11:53 +01:00
Jörg Thalheim 4f1c14ab94 Update elm-language-server to 1.4.4 (#72359)
Update elm-language-server to 1.4.4
2019-10-31 12:59:29 +00:00
Marek Mahut c90cae257b Merge pull request #72360 from mmahut/jormungandr
jormungandr: 0.7.0-rc2 -> 0.7.0-rc3
2019-10-31 13:44:22 +01:00
taku0 0bc5d7fcfe firefox: 70.0 -> 70.0.1 2019-10-31 21:25:52 +09:00
taku0 14282e91ef firefox-bin: 70.0 -> 70.0.1 2019-10-31 21:25:37 +09:00
Peter Simons 6bd0704542 Merge pull request #72338 from nkpart/nkpart/fix-rPackages-ModelMetrics
rPackages.ModelMetrics: fix darwin build
2019-10-31 13:11:43 +01:00
Marek Mahut c364c6f09f Merge pull request #72336 from marsam/update-flow
flow: 0.110.0 -> 0.111.0
2019-10-31 13:08:28 +01:00
Marek Mahut 07a8c77142 jormungandr: 0.7.0-rc2 -> 0.7.0-rc3 2019-10-31 13:07:17 +01:00
Marek Mahut 24753c4123 Merge pull request #69962 from gomain/master
Cypress 3.4.1: Fix files used for verification.
2019-10-31 13:03:19 +01:00
Marek Mahut bd2bccc47d Merge pull request #72144 from chessai/libck-init
libck: init at 0.7.0
2019-10-31 13:03:06 +01:00
andys8 29260acb75 Update elm-language-server to 1.4.4 2019-10-31 12:45:50 +01:00
Bas van Dijk 1a55b2b6b0 Merge pull request #72356 from basvandijk/cargo-audit-0.10.0
cargo-audit: 0.9.3 -> 0.10.0
2019-10-31 11:58:58 +01:00
Renaud 46911eb091 Merge pull request #72334 from astro/firestarter
firestarter: 1.7.3 -> 1.7.4
2019-10-31 11:50:43 +01:00
Renaud ccae78ca4f Merge pull request #71486 from chessai/forge-add
forge: init at 1.0.4
2019-10-31 11:40:24 +01:00
Graham Christensen cda4a36eda Merge pull request #72186 from AmineChikhaoui/ec2-19-09-amis
ec2-amis.nix: add 19.09 amis
2019-10-31 11:13:11 +01:00
Marek Mahut 392b12f252 Merge pull request #72089 from prusnak/trezor-udev-rules
trezor-udev-rules: init at unstable-2019-07-17
2019-10-31 10:48:48 +01:00
Marek Mahut 0bbd890ea7 Merge pull request #72352 from jonringer/codeowner-vscode-vim
codeowners: add jonringer as vimplugin and vscode ext owner
2019-10-31 10:33:54 +01:00
Marek Mahut 1d9e1d4f2d Merge pull request #72355 from markuskowa/upd-welle
welle-io: 1.0 -> 2.0
2019-10-31 10:29:19 +01:00
Jörg Thalheim c91a1be877 nixos/orangefs: init at 2.9.7, add modules and test (#67591)
nixos/orangefs: init at 2.9.7, add modules and test
2019-10-31 09:27:14 +00:00
Bas van Dijk e2b084951c cargo-audit: 0.9.3 -> 0.10.0
0.10.0 (2019-10-13)

* Upgrade rustsec to v0.16; new self-audit system (#155)
* Upgrade to Abscissa v0.4; MSRV 1.36 (#154)
2019-10-31 10:10:35 +01:00
Markus Kowalewski b6122418ed welle-io: 1.0 -> 2.0 2019-10-31 09:27:05 +01:00
Renaud cbc94a05ba stress-ng: 0.10.05 -> 0.10.08 (#72333)
+ fixes #72292
2019-10-31 08:58:44 +01:00
Rakesh Gupta 6b46338847 pythonPackages.labelbox: init at 2.1 2019-10-31 00:38:41 -07:00
Vincent Laporte a17f7277a8 ocamlPackages.sawja: 1.5.6 → 1.5.7 2019-10-31 07:29:53 +00:00
Rakesh Gupta e5236a136d pythonPackages.opentracing: init at 2.2.0 2019-10-30 23:51:37 -07:00
Rakesh Gupta b5401f0c65 maintainers: add rakesh4g 2019-10-30 23:51:37 -07:00
Markus Kowalewski 10bccd2952 uhd: fix outdated python module (Mako) 2019-10-31 07:10:09 +01:00
ajs124 03ec5e7e15 python3.pkgs.cherrypy: 18.1.2 -> 18.3.0 and fix tests 2019-10-30 22:35:44 -07:00
Peter Hoeg 015d3202e9 Merge pull request #72350 from peterhoeg/f/checks
check-nwc-health: fix source URL
2019-10-31 12:49:28 +08:00
Jonathan Ringer 4c810e70ef codeowners: add jonringer as vimplugin and vscode ext owner 2019-10-30 21:49:23 -07:00
Justin Lovinger 274bf0a395 vimPlugins.antonys-macro-repeater: init at 2017-09-10 2019-10-30 21:41:55 -07:00
Justin Lovinger 565cca327a vimPlugins: Update 2019-10-30 21:41:55 -07:00
Trolli Schmittlauch 01c7499c77 cawbird: 1.0.2 -> 1.0.3.1 2019-10-30 21:27:34 -07:00
Mario Rodas b861611b73 procs: 0.8.11 -> 0.8.13 2019-10-30 21:14:43 -07:00