Joachim Fasting
063ac40304
nixos: add a "hardened" profile
...
The idea is to provide a convenient way to enable most vanilla hardening
features in one go. The hardened profile, then, will serve as a place for
features that enhance security but cannot be enabled for all deployments
because they interfere with legitimate use cases (e.g., using ptrace to
debug problems in an already running process).
Closes https://github.com/NixOS/nixpkgs/pull/24680
2017-04-23 11:00:52 +02:00
Joachim Fasting
1b3300bf01
nixos/tests/misc: check hidepid mount via /proc/mounts
2017-04-23 11:00:46 +02:00
Kevin Cox
32d649eb80
etcd: 3.0.6 -> 3.1.6
...
Upgrade etcd.
- Switches from their old dependency version system to their vendored packages.
- Fixes SSL support.
2017-04-23 09:26:57 +01:00
taku0
a68f95da17
firefox: 52.0.2 -> 53.0
2017-04-23 11:50:33 +09:00
taku0
5bcaeda4c8
hunspell: 1.3.3 -> 1.6.1
2017-04-23 11:42:59 +09:00
Rok Garbas
0feca1abb6
Merge pull request #25135 from garbas/update-asciinema
...
Update asciinema
2017-04-23 04:33:27 +02:00
Rok Garbas
93cacf61a8
asciinema: 1.3.0 -> 1.4.0
2017-04-23 04:18:11 +02:00
Cray Elliott
df86c9731b
ripgrep: 0.5.0 -> 0.5.1
2017-04-22 19:03:09 -07:00
Michael Weiss
e1244f6e8a
Revert "display-manager: fix argument handling of sddm"
...
This reverts commit 6b7c5ba535
.
Unfortunately it seems like this broke slim, lightdm and gdm (see #25068
and #23264 ). This is already reverted in the 17.03 branch (99dfb6d
).
TODO: We need tests for slim and lightdm and fix the test for gdm
(failing since 2016-10-26) to prevent such breakage in the future.
2017-04-23 03:19:07 +02:00
Graham Christensen
55d4d50cd3
rt: improve packaging, with a progress note
2017-04-22 16:24:33 -04:00
Graham Christensen
46f952371e
perlPackages.DataPagePageset: init at 1.02
2017-04-22 16:24:30 -04:00
Graham Christensen
b48ea664f5
perlPackages.MIMETools: init at 5.509
2017-04-22 16:24:26 -04:00
Graham Christensen
38574a5878
perlPackages.GDGraph: init at 1.54
2017-04-22 16:24:23 -04:00
Graham Christensen
2d65b7f251
perlPackages.JavaScriptMinifierXS: init at 0.11
2017-04-22 16:24:10 -04:00
Graham Christensen
2f1ef64492
perlPackages.GDText: init at 0.86
2017-04-22 16:08:56 -04:00
Graham Christensen
a9f8912845
perlPackages.CSSMinifierXP: init at 1.02
2017-04-22 16:08:11 -04:00
Graham Christensen
76cea3de93
perlPackages.BusinessHours: init at 0.12
2017-04-22 16:07:25 -04:00
Thomas Tuegel
e019978d02
Merge pull request #23922 from gnidorah/master
...
mytetra: init at 1.42.2
2017-04-22 15:06:44 -05:00
Graham Christensen
0ceb82d3dd
perlPackages.SetIntSpan: init at 1.19
2017-04-22 16:05:07 -04:00
Domen Kožar
e30b5c198a
Merge pull request #25118 from dmjio/patch-1
...
HaLVM: Shebang fix for Hydra
2017-04-22 20:13:24 +02:00
Richard Lupton
69ed7f6e12
emacs-all-the-icons-fonts: init at 2.5.0
2017-04-22 18:54:51 +01:00
David Johnson
bcd5865adf
HaLVM: Shebang fix for Hydra
...
On my local nixos machine, `useSandbox = true;` wasn't enabled. This exposed the fact that various scripts weren't shebang-patched. @cleverca22 has provided the fix.
cc @peti @domenkozar @Ericson2314
2017-04-22 10:33:01 -07:00
Richard Szibele
5f9096a033
curlcpp: 20160901 -> 1.0 ( #25104 )
2017-04-22 16:14:32 +01:00
Vladimír Čunát
b72d4e13c7
kdiff3: fixup patch hash after #25059
...
I'm sorry; not sure why the hash didn't match;
I probably kept the hash of an older version by mistake.
2017-04-22 16:37:48 +02:00
Joachim Fasting
9e6c96f8fc
grsecurity: 4.9.24-201704210851 -> 4.9.24-2201704220732
2017-04-22 16:37:24 +02:00
Pascal Bach
d609a5eb5c
gitlab-runner_1_11: 1.11.1 -> 1.11.2
2017-04-22 14:11:07 +02:00
Pascal Bach
be463abc10
gitlab-runner: 9.0.0 -> 9.1.0
2017-04-22 14:10:48 +02:00
Vladimír Čunát
5cdf192827
Merge #25043 : firefox-{bin,esr}: critical security
2017-04-22 11:51:02 +02:00
Edward Tjörnhammar
da2518fe25
i2pd: 0.12.0 -> 0.13.0
2017-04-22 09:43:24 +02:00
Edward Tjörnhammar
ad84b1e4b9
jackett: 0.7.1197 -> 0.7.1308
2017-04-22 09:43:00 +02:00
romildo
2f481960cf
ephoto: init at 1.0
2017-04-22 03:06:12 +03:00
obadz
c8788f4e7b
python2Packages.pyspread: init at 1.1
2017-04-22 00:27:40 +01:00
obadz
a5cb00e884
pythonPackages.wxPython: inject Cairo, Pango and GDK library paths
2017-04-21 23:51:39 +01:00
Benno Fünfstück
cfcceaee27
Merge pull request #24473 from jgertm/tj/xsv
...
xsv: init at 0.11.0
2017-04-22 00:26:10 +02:00
Benno Fünfstück
1db5cf49d3
Merge pull request #24479 from Ma27/init/lambda-mod-zsh-theme
...
lambda-mod-zsh-theme: init at eceee68cf46bba9f7f42887c2128b48e8861e31b
2017-04-22 00:10:14 +02:00
Benno Fünfstück
855155083a
Merge pull request #24755 from LumiGuide/bepasty-secretKeyFile
...
bepasty: add secretKeyFile option
2017-04-22 00:07:04 +02:00
Benno Fünfstück
a0e60af067
Merge pull request #24819 from dbrock/ethrun
...
ethrun: init at 0.1.0
2017-04-21 23:54:07 +02:00
Eelco Dolstra
d387a1f0ae
youtube-dl: 2017.04.02 -> 2017.04.17
2017-04-21 23:32:37 +02:00
Benno Fünfstück
bd78749d33
rust: improve fetch-cargo-deps determinism for non-sandboxed builds
...
When not using sandboxing, /usr/share/git-core/templates may leak into the
nix build through the libgit2 hardcoded default template search path. We now
explictly set the templatedir to avoid this problem.
See https://github.com/bennofs/nix-index/issues/2#issuecomment-296268983 for
an example case of nondeterminism.
2017-04-21 23:26:46 +02:00
Daiderd Jordan
5238b85207
Merge pull request #25069 from matthewbauer/libbsd-darwin
...
libbsd: fixup on darwin
2017-04-21 22:55:08 +02:00
obadz
c4fecfb1ec
ecryptfs-helper: fix makeWrapper use after 7ff6eec5
2017-04-21 21:25:30 +01:00
obadz
dbb06ea3d2
pythonPackages.typeguard: init at 2.3.1 ( #25040 )
2017-04-21 21:20:49 +01:00
Frederik Rietdijk
c6b3c66277
wineUnstable: 2.5 -> 2.6
2017-04-21 21:38:54 +02:00
Frederik Rietdijk
d16a4512d0
wine: 2.0 -> 2.0.1
2017-04-21 21:38:54 +02:00
Eelco Dolstra
20647f8a8e
Merge pull request #25091 from joepie91/patch-2
...
fetchurl: fixed typo in error message
2017-04-21 17:54:06 +02:00
Peter Hoeg
6695c95ebd
unifi: 5.4.11 -> 5.4.14
2017-04-21 23:13:47 +08:00
Chris Hodapp
5864baa4c6
mapnik: add optional PostgreSQL dependency
...
Closes #25063 .
2017-04-21 16:50:43 +02:00
Jörg Thalheim
f88085d45f
Merge pull request #25089 from Mic92/dino
...
dino: disable parallel build
2017-04-21 16:45:39 +02:00
Sven Slootweg
fa8adf2c47
fetchurl: fixed typo in error message
...
This typo was likely introduced by copy-pasting the error message from elsewhere and forgetting to change the text, during the MD5 deprecation process (#4491 ).
2017-04-21 16:41:09 +02:00
Jörg Thalheim
95d9b582f1
dino: disable parallel build
...
attempt to fix hydra build: https://hydra.nixos.org/build/51816616/nixlog/1
2017-04-21 16:26:29 +02:00