Commit Graph

75680 Commits

Author SHA1 Message Date
Nathan Zadoks
23f5e3c90f linux: patch CVE-2016-0728 (close #12492)
The PoC provided successfully escalates privileges from a local user to
root. The vulnerability affects any Linux Kernel version 3.8 and higher.
http://perception-point.io/2016/01/14/analysis-and-exploitation-of-a-linux-kernel-vulnerability-cve-2016-0728/
2016-01-20 09:31:53 +01:00
Tobias Geerinckx-Rice
f1f2b87fdd snapper: various tweaks and fixes
Fix numerous configuration files referring to ‘/usr’ and ‘/lib’.

Some paths were still ending up in ‘/nix/store/.../nix/store/...’,
despite some well-intended hacks meant to avoid that. Replace them
with other hacks. It's all very fragile and ugly, so snapper should
feel right at home.

Oh, and `snapper create-config ~` still won't actually *do*
anything, because D-Bus (#12452). Use `--no-dbus` and add files
to ‘/etc’ as long as it complains.

Only fair that I help maintain this mess.
2016-01-20 09:21:44 +01:00
Tobias Geerinckx-Rice
72cd96a0e1 libpsl: list 2016-01-09 -> 2016-01-15 2016-01-20 09:21:44 +01:00
Vladimír Čunát
535b112038 imagemagick: add a more "reliable" mirror to fix #12493 2016-01-20 09:11:23 +01:00
Joachim Schiele
2a88417f03 nixos/doc: fix to: ~/.nix-defexpr wasn't created, fixes #6606 2016-01-20 04:59:16 +01:00
Rok Garbas
95db340fd0 ib-tws, ib-controller: init at 9542 and 2.14.0, fixes #8142 2016-01-20 04:42:30 +01:00
Rok Garbas
4f40a45426 oraclejdk8: 8u65 -> 8u72 2016-01-20 04:42:30 +01:00
Dan Peebles
48513dfb22 nodejs: remove unreferenced patchfile 2016-01-19 22:29:02 -05:00
Dan Peebles
5cb1e43fd6 nodejs-5: fix on darwin
Turns out the darwin-flavored patches aren't needed anymore.

Fixes #12305
2016-01-19 22:28:42 -05:00
Wei-Ming Yang
9d9cb9f087 softether: move package in SERVERS section, fixes #11576 2016-01-20 03:47:52 +01:00
Rick Yang
f8c3130e0f softether: Fixed problems with using systemd services 2016-01-20 03:47:33 +01:00
Peter Jones
5b8c871842 If container name is already unique, don't append "-0"
When using `--ensure-unique-name`, don't needlessly append `"-0"` if the
container name is already unique.

This is especially helpful with NixOps since when it deploys to a
container it uses `--ensure-unique-name`.  This means that the container
name will never match the deployment host due to the `"-0"`.  Having the
container name and the host name match isn't exactly a requirement, but
it's nice to have and a small change.
2016-01-20 03:46:19 +01:00
Rok Garbas
109ba4c861 nixos: add test for postgresql, fixes #11146 2016-01-20 03:42:59 +01:00
Rok Garbas
dd9bad4aa4 rubygems: 2.4.1 -> 2.4.8, fixes #8492 2016-01-20 03:36:36 +01:00
Guillaume Maudoux
f8ff4691ed linux-mptcp: init at 0.90 (kernel 3.18.20), fixes #11149 2016-01-20 02:11:09 +01:00
Mark Laws
1c393cbb3c gale service: fix permissions configuration, fixes #12457 2016-01-20 02:09:40 +01:00
Tobias Geerinckx-Rice
8da914cad4 minissdpd: 1.5 -> 1.5.20160119 2016-01-20 02:00:15 +01:00
Tuomas Tynkkynen
69ba6c1d30 mmc-utils: init at 2015-11-18, fixes #12489 2016-01-20 01:50:34 +01:00
Tobias Geerinckx-Rice
df29b0d23f nixos: fix evaluation
After commit 5e468b9, evaluation failed with:

  error: undefined variable ‘dnsExtensionMechanism’ at
  .../nixpkgs/nixos/modules/config/networking.nix:177:33
2016-01-20 01:19:03 +01:00
Rok Garbas
077f7ceaab pythonPackages.turses: disabled pypy and py3k builds 2016-01-20 00:28:41 +01:00
Rok Garbas
f75a122d24 pythonPackages: turses 0.2.23->0.3.1, tweepy 2.3.0->3.5.0, closes #12286 2016-01-20 00:20:36 +01:00
Eric Seidel
322a691377 emacs-packages: update diminish 0.44 -> 0.45 2016-01-19 14:16:35 -08:00
Arseniy Seroka
d1158d3b83 Merge pull request #12486 from LnL7/vim-youcompleteme-unix
vimPlugins.youcompleteme: enable on unix
2016-01-20 00:48:06 +03:00
Daiderd Jordan
465e965e38 vimPlugins.youcompleteme: enable on unix 2016-01-19 22:41:31 +01:00
Peter Simons
82b464820e Merge pull request #12473 from gleber/update-erlang-hex-packages
Erlang: update tooling and hex packages
2016-01-19 22:18:32 +01:00
Peter Simons
5e468b96b4 nixos: add 'networking.dnsExtensionMechanism' option to enable edns0 (for DNSSEC)
Set this option to 'true' (default: 'false') to enable extension mechanisms for
DNS (EDNS) in your local glibc resolver. This is required for supporting
DNSSEC, for example.

Implementation detail: the patch changes assignments to "resolv_conf_options"
to use "+=" instead of "=" to ensure that multiple users of that variable don't
overwrite each other. The generated config file is a shell script, after all,
so this should work fine.

Closes https://github.com/NixOS/nixpkgs/issues/12470.
2016-01-19 21:54:43 +01:00
Tobias Geerinckx-Rice
8871de95f5 fuze: remove dead package
Last maintained in 2013. Building fails due to vanished sources.
Upstream has the following to say:

  “As of February 11th 2015, Fuze will no longer support a native
   Linux-based client. This means that any customers attempting to
   install or use our previous Linux client will be unable to do
   so. There are currently no plans to create an updated version
   of the Linux client for Fuze. For Linux based customers that
   still wish to use Fuze, we recommend that you try our browser
   client.” -- https://support.fuze.com/hc/en-us/articles/201527877-Does-Fuze-Support-Linux-

Never marked as broken, but has been so for quite some time.
2016-01-19 21:36:23 +01:00
Tobias Geerinckx-Rice
94a47eeea1 debian_devscripts: 2.15.8 -> 2.15.10
Changes: http://metadata.ftp-master.debian.org/changelogs/main/d/devscripts/
2016-01-19 21:36:23 +01:00
Tobias Geerinckx-Rice
38c83e2916 pythonPackages.pygments: 2.0.2 -> 2.1
- Added lexers, styles, formatters.
- New "filename" option for HTML formatter (PR#527).
- Improved performance of the HTML formatter for long lines (PR#504).
- Updated autopygmentize script (PR#445).
- Fixed style inheritance for non-standard token types in HTML
  output.
- Added support for async/await to Python 3 lexer.
- Rewrote linenos option for TerminalFormatter (it's better, but
  slightly different output than before) (#1147).
- Javascript lexer now supports most of ES6 (#1100).
- Cocoa builtins updated for iOS 8.1 (PR#433).
- Combined BashSessionLexer and ShellSessionLexer, new version
  should support the prompt styles of either.
- Added option to pygmentize to show a full traceback on exceptions.
- Fixed incomplete output on Windows and Python 3 (e.g. when using
  iPython Notebook) (#1153).
- Allowed more traceback styles in Python console lexer (PR#253).
- Added decorators to TypeScript (PR#509).
- Fix highlighting of certain IRC logs formats (#1076).

More: https://bitbucket.org/birkenfeld/pygments-main/src/tip/CHANGES
2016-01-19 21:36:23 +01:00
Eelco Dolstra
ac0c49970b make-tarball.nix: Allow passing in a different Nix
Used by the Nix tests (9fff492561).
2016-01-19 21:28:53 +01:00
Joe Hermaszewski
319acb0af5 openimageio: 1.4.16 -> 1.6.9 2016-01-19 19:01:22 +00:00
Danny Wilson
e67717bc8d glib: fix compilation on SmartOS/Illumos (close #12479)
Recent illumos includes a linux-incompatible `inotify.h` header, which configure detects: compilation fails.
Also, a newer `dtrace` on SmartOS fails creating the probes ELF linkable object (with `dtrace -G`). Disable for now.

Remove old configure option `--disable-modular-tests`.
2016-01-19 17:38:44 +01:00
Ricardo M. Correia
d51204e8de zfs: 0.6.5.3 -> 0.6.5.4 2016-01-19 16:34:14 +01:00
Ricardo M. Correia
fe53cb56d9 spl: 0.6.5.3 -> 0.6.5.4 2016-01-19 16:34:14 +01:00
Arseniy Seroka
5f767b2580 Merge pull request #12462 from wizeman/u/add-fstar
fstar: init at 2016-01-12
2016-01-19 16:41:44 +03:00
Gleb Peregud
73c8aa49e4 Update hex-packages.nix with hermetic rebar3.
This made some packages not build, because rebar3 tries to download
`rebar3_hex` for them.
2016-01-19 12:58:43 +01:00
Gleb Peregud
6dc5dc1068 rebar3-nix-bootstrap: 0.0.2 -> 0.0.3 2016-01-19 12:58:33 +01:00
Gleb Peregud
28fc526f16 Update Erlang hex.pm packages at 2016-01-19.
This is a first fully automatic build.
2016-01-19 12:36:52 +01:00
Vladimír Čunát
c860e27ef2 zeroad: do not build on Hydra
It should be possible to build binaries without data and then compose by
a wrapper, e.g. similarly to what simutrans does.
2016-01-19 12:16:18 +01:00
Franz Pletz
e8f3964ca5 Merge pull request #12464 from ericsagnes/pkgs/albert
albert: init at 0.8.0
2016-01-19 12:07:52 +01:00
Domen Kožar
9c571a98ed Merge pull request #10998 from andrewrynhard/master
Add help flag to nix-prefetch-git
2016-01-19 12:01:55 +01:00
Jascha Geerds
44d0d58c84 gnome3: 3.18.1 -> 3.18.2 2016-01-19 11:32:06 +01:00
Eelco Dolstra
e210fdd272 Merge pull request #12469 from domenkozar/fetchurl/executable
fetchurl: support executables
2016-01-19 11:27:13 +01:00
Domen Kožar
c7383cb34b fetchurl: support executables 2016-01-19 11:17:49 +01:00
Peter Simons
cdd07d166b uhc: the build is broken (and will be for the foreseeable future) 2016-01-19 11:10:29 +01:00
Rob Vermaas
ce2756f701 Fix nixops URL 2016-01-19 10:00:32 +00:00
Robin Gloster
9a499b9125 Merge pull request #12463 from ericsagnes/i3-module
i3 service: added i3status and dmenu dependency
2016-01-19 10:17:37 +01:00
Vladimír Čunát
315745094c Merge #11535: protobuf: 3.0.0-alpha-3.1 -> 3.0.0-beta-2 2016-01-19 08:25:44 +01:00
Vladimír Čunát
37598195e5 protobuf-3.0: enableParallelBuilding = true
Otherwise it takes quite a long time to build.
2016-01-19 08:24:55 +01:00
Tobias Geerinckx-Rice
f499c03ec0 snapper: add missing dependencies (chattr, lv*) 2016-01-19 02:04:18 +01:00