Commit Graph

105994 Commits

Author SHA1 Message Date
Joachim Fasting
063ac40304
nixos: add a "hardened" profile
The idea is to provide a convenient way to enable most vanilla hardening
features in one go.  The hardened profile, then, will serve as a place for
features that enhance security but cannot be enabled for all deployments
because they interfere with legitimate use cases (e.g., using ptrace to
debug problems in an already running process).

Closes https://github.com/NixOS/nixpkgs/pull/24680
2017-04-23 11:00:52 +02:00
Joachim Fasting
1b3300bf01
nixos/tests/misc: check hidepid mount via /proc/mounts 2017-04-23 11:00:46 +02:00
Kevin Cox
32d649eb80
etcd: 3.0.6 -> 3.1.6
Upgrade etcd.

- Switches from their old dependency version system to their vendored packages.
- Fixes SSL support.
2017-04-23 09:26:57 +01:00
taku0
a68f95da17 firefox: 52.0.2 -> 53.0 2017-04-23 11:50:33 +09:00
taku0
5bcaeda4c8 hunspell: 1.3.3 -> 1.6.1 2017-04-23 11:42:59 +09:00
Rok Garbas
0feca1abb6 Merge pull request #25135 from garbas/update-asciinema
Update asciinema
2017-04-23 04:33:27 +02:00
Rok Garbas
93cacf61a8
asciinema: 1.3.0 -> 1.4.0 2017-04-23 04:18:11 +02:00
Cray Elliott
df86c9731b ripgrep: 0.5.0 -> 0.5.1 2017-04-22 19:03:09 -07:00
Michael Weiss
e1244f6e8a Revert "display-manager: fix argument handling of sddm"
This reverts commit 6b7c5ba535.

Unfortunately it seems like this broke slim, lightdm and gdm (see #25068
and #23264). This is already reverted in the 17.03 branch (99dfb6d).

TODO: We need tests for slim and lightdm and fix the test for gdm
(failing since 2016-10-26) to prevent such breakage in the future.
2017-04-23 03:19:07 +02:00
Graham Christensen
55d4d50cd3
rt: improve packaging, with a progress note 2017-04-22 16:24:33 -04:00
Graham Christensen
46f952371e
perlPackages.DataPagePageset: init at 1.02 2017-04-22 16:24:30 -04:00
Graham Christensen
b48ea664f5
perlPackages.MIMETools: init at 5.509 2017-04-22 16:24:26 -04:00
Graham Christensen
38574a5878
perlPackages.GDGraph: init at 1.54 2017-04-22 16:24:23 -04:00
Graham Christensen
2d65b7f251
perlPackages.JavaScriptMinifierXS: init at 0.11 2017-04-22 16:24:10 -04:00
Graham Christensen
2f1ef64492
perlPackages.GDText: init at 0.86 2017-04-22 16:08:56 -04:00
Graham Christensen
a9f8912845
perlPackages.CSSMinifierXP: init at 1.02 2017-04-22 16:08:11 -04:00
Graham Christensen
76cea3de93
perlPackages.BusinessHours: init at 0.12 2017-04-22 16:07:25 -04:00
Thomas Tuegel
e019978d02 Merge pull request #23922 from gnidorah/master
mytetra: init at 1.42.2
2017-04-22 15:06:44 -05:00
Graham Christensen
0ceb82d3dd
perlPackages.SetIntSpan: init at 1.19 2017-04-22 16:05:07 -04:00
Domen Kožar
e30b5c198a Merge pull request #25118 from dmjio/patch-1
HaLVM: Shebang fix for Hydra
2017-04-22 20:13:24 +02:00
Richard Lupton
69ed7f6e12
emacs-all-the-icons-fonts: init at 2.5.0 2017-04-22 18:54:51 +01:00
David Johnson
bcd5865adf HaLVM: Shebang fix for Hydra
On my local nixos machine, `useSandbox = true;` wasn't enabled. This exposed the fact that various scripts weren't shebang-patched. @cleverca22 has provided the fix.

cc @peti @domenkozar @Ericson2314
2017-04-22 10:33:01 -07:00
Richard Szibele
5f9096a033 curlcpp: 20160901 -> 1.0 (#25104) 2017-04-22 16:14:32 +01:00
Vladimír Čunát
b72d4e13c7
kdiff3: fixup patch hash after #25059
I'm sorry; not sure why the hash didn't match;
I probably kept the hash of an older version by mistake.
2017-04-22 16:37:48 +02:00
Joachim Fasting
9e6c96f8fc
grsecurity: 4.9.24-201704210851 -> 4.9.24-2201704220732 2017-04-22 16:37:24 +02:00
Pascal Bach
d609a5eb5c gitlab-runner_1_11: 1.11.1 -> 1.11.2 2017-04-22 14:11:07 +02:00
Pascal Bach
be463abc10 gitlab-runner: 9.0.0 -> 9.1.0 2017-04-22 14:10:48 +02:00
Vladimír Čunát
5cdf192827
Merge #25043: firefox-{bin,esr}: critical security 2017-04-22 11:51:02 +02:00
Edward Tjörnhammar
da2518fe25
i2pd: 0.12.0 -> 0.13.0 2017-04-22 09:43:24 +02:00
Edward Tjörnhammar
ad84b1e4b9
jackett: 0.7.1197 -> 0.7.1308 2017-04-22 09:43:00 +02:00
romildo
2f481960cf ephoto: init at 1.0 2017-04-22 03:06:12 +03:00
obadz
c8788f4e7b python2Packages.pyspread: init at 1.1 2017-04-22 00:27:40 +01:00
obadz
a5cb00e884 pythonPackages.wxPython: inject Cairo, Pango and GDK library paths 2017-04-21 23:51:39 +01:00
Benno Fünfstück
cfcceaee27 Merge pull request #24473 from jgertm/tj/xsv
xsv: init at 0.11.0
2017-04-22 00:26:10 +02:00
Benno Fünfstück
1db5cf49d3 Merge pull request #24479 from Ma27/init/lambda-mod-zsh-theme
lambda-mod-zsh-theme: init at eceee68cf46bba9f7f42887c2128b48e8861e31b
2017-04-22 00:10:14 +02:00
Benno Fünfstück
855155083a Merge pull request #24755 from LumiGuide/bepasty-secretKeyFile
bepasty: add secretKeyFile option
2017-04-22 00:07:04 +02:00
Benno Fünfstück
a0e60af067 Merge pull request #24819 from dbrock/ethrun
ethrun: init at 0.1.0
2017-04-21 23:54:07 +02:00
Eelco Dolstra
d387a1f0ae youtube-dl: 2017.04.02 -> 2017.04.17 2017-04-21 23:32:37 +02:00
Benno Fünfstück
bd78749d33 rust: improve fetch-cargo-deps determinism for non-sandboxed builds
When not using sandboxing, /usr/share/git-core/templates may leak into the
nix build through the libgit2 hardcoded default template search path. We now
explictly set the templatedir to avoid this problem.

See https://github.com/bennofs/nix-index/issues/2#issuecomment-296268983 for
an example case of nondeterminism.
2017-04-21 23:26:46 +02:00
Daiderd Jordan
5238b85207 Merge pull request #25069 from matthewbauer/libbsd-darwin
libbsd: fixup on darwin
2017-04-21 22:55:08 +02:00
obadz
c4fecfb1ec ecryptfs-helper: fix makeWrapper use after 7ff6eec5 2017-04-21 21:25:30 +01:00
obadz
dbb06ea3d2 pythonPackages.typeguard: init at 2.3.1 (#25040) 2017-04-21 21:20:49 +01:00
Frederik Rietdijk
c6b3c66277 wineUnstable: 2.5 -> 2.6 2017-04-21 21:38:54 +02:00
Frederik Rietdijk
d16a4512d0 wine: 2.0 -> 2.0.1 2017-04-21 21:38:54 +02:00
Eelco Dolstra
20647f8a8e Merge pull request #25091 from joepie91/patch-2
fetchurl: fixed typo in error message
2017-04-21 17:54:06 +02:00
Peter Hoeg
6695c95ebd unifi: 5.4.11 -> 5.4.14 2017-04-21 23:13:47 +08:00
Chris Hodapp
5864baa4c6
mapnik: add optional PostgreSQL dependency
Closes #25063.
2017-04-21 16:50:43 +02:00
Jörg Thalheim
f88085d45f Merge pull request #25089 from Mic92/dino
dino: disable parallel build
2017-04-21 16:45:39 +02:00
Sven Slootweg
fa8adf2c47 fetchurl: fixed typo in error message
This typo was likely introduced by copy-pasting the error message from elsewhere and forgetting to change the text, during the MD5 deprecation process (#4491).
2017-04-21 16:41:09 +02:00
Jörg Thalheim
95d9b582f1
dino: disable parallel build
attempt to fix hydra build: https://hydra.nixos.org/build/51816616/nixlog/1
2017-04-21 16:26:29 +02:00