Alyssa Ross
bee5a980c1
linux_latest-libre: 19473 -> 19482
2024-01-29 17:37:49 +01:00
Alyssa Ross
92d90fd5b1
linux_testing: 6.8-rc1 -> 6.8-rc2
2024-01-29 17:37:49 +01:00
John Ericson
b5a8242f93
Merge pull request #279039 from wegank/mingw-w64-bump
...
windows.mingw_w64: 10.0.0 -> 11.0.1
2024-01-29 08:15:02 -05:00
Sandro
eb86b39576
Merge pull request #284642 from r-ryantm/auto-update/intel-compute-runtime
2024-01-29 13:37:11 +01:00
markuskowa
5ef1851bb4
Merge pull request #284613 from r-ryantm/auto-update/rdma-core
...
rdma-core: 49.1 -> 50.0
2024-01-29 10:06:27 +01:00
Fabián Heredia Montiel
45fad8902f
linux/hardened/patches/6.7: init at 6.7.2-hardened1
2024-01-29 09:44:08 +01:00
Fabián Heredia Montiel
018def54e4
linux/hardened/patches/6.6: 6.6.13-hardened1 -> 6.6.14-hardened1
2024-01-29 09:44:08 +01:00
Fabián Heredia Montiel
b3f3397b4b
linux/hardened/patches/6.1: 6.1.74-hardened1 -> 6.1.75-hardened1
2024-01-29 09:44:08 +01:00
Fabián Heredia Montiel
33dd85989d
linux/hardened/patches/5.4: 5.4.267-hardened1 -> 5.4.268-hardened1
2024-01-29 09:44:08 +01:00
Fabián Heredia Montiel
503d0f65a7
linux/hardened/patches/5.15: 5.15.147-hardened1 -> 5.15.148-hardened1
2024-01-29 09:44:08 +01:00
Fabián Heredia Montiel
ed540a7c8e
linux/hardened/patches/5.10: 5.10.208-hardened1 -> 5.10.209-hardened1
2024-01-29 09:44:08 +01:00
Fabián Heredia Montiel
114b7a4a3b
linux/hardened/patches/4.19: 4.19.305-hardened1 -> 4.19.306-hardened1
2024-01-29 09:44:08 +01:00
R. Ryantm
9e67b4305c
intel-compute-runtime: 23.43.27642.18 -> 23.48.27912.11
2024-01-29 00:21:45 +00:00
R. Ryantm
6b47b1113f
rdma-core: 49.1 -> 50.0
2024-01-28 20:40:01 +00:00
Joachim F
6dd56e1483
Merge pull request #275579 from tamara-schmitz/master
...
update hardened profile to new recommendations
2024-01-28 20:25:27 +01:00
Sandro
f35ab6dee7
Merge pull request #230368 from risicle/ris-libbpf-passthru-tests
...
libbpf: add some key reverse dependencies to `passthru.tests`
2024-01-28 19:14:27 +01:00
Yureka
feca0eecd1
systemd: update musl patches for v255 ( #284136 )
2024-01-28 14:12:00 +01:00
Mario Rodas
d78238fc08
Merge pull request #283700 from r-ryantm/auto-update/fwts
...
fwts: 23.11.00 -> 24.01.00
2024-01-28 08:03:56 -05:00
Alyssa Ross
63c01a3576
linux_6_7: fix Rust support with current rustc
...
The 1.75 patch can't be fetched, because it doesn't apply. But git
can apply it cleanly, so it must just need to do a three-way merge or
something. Regardless, we need to include a version that patch(1) can
apply in Nixpkgs.
2024-01-28 10:54:17 +01:00
Weijia Wang
bbe271c236
Merge pull request #282193 from r-ryantm/auto-update/setools
...
setools: 4.4.1 -> 4.4.4
2024-01-28 07:53:38 +01:00
Weijia Wang
03e3e91dfb
setools: fix runtime error
2024-01-28 07:18:15 +01:00
R. Ryantm
ab63839a5d
setools: 4.4.1 -> 4.4.4
2024-01-28 07:17:57 +01:00
Tamara Schmitz
b80c3284d5
nixos/hardened: update hardened profile to new recommendations
...
Borrowing from here to match hardened profile with more recent kernels:
* https://madaidans-insecurities.github.io/guides/linux-hardening.html?#boot-parameters
* https://github.com/a13xp0p0v/kernel-hardening-checker/
Removed "slub_debug" as that option disables kernel memory address
hashing. You also see a big warning about this in the dmesg:
"This system shows unhashed kernel memory addresses via the console, logs, and other interfaces."
"init_on_alloc=1" and "init_on_free=1" zeroes all SLAB and SLUB allocations. Introduced in 6471384af2a6530696fc0203bafe4de41a23c9ef. Also the default for the Android Google kernel btw. It is on by default through the KConfig.
"slab_nomerge" prevents the merging of slab/slub caches. These are
effectively slab/slub pools.
"LEGACY_VSYSCALL_NONE" disables the older vsyscall mechanic that relies on
static address. It got superseeded by vdsos a decade ago. Read some
LWN.net to learn more ;)
"debugfs=off" I'm sure there are some few userspace programs that rely on
debugfs, but they shouldn't.
Most other things mentioned on the blog where already the default on a
running machine or may not be applicable.
Most other Kconfigs changes come from the kernel hardening checker and
were added, when they were not applied to the kernel already.
Unsure about CONFIG_STATIC_USERMODEHELPER. Would need testing.
2024-01-27 20:43:58 +00:00
Jerry Starke
944aef9fb7
linuxKernel.kernels.linux_lqx: 6.7.1-lqx1 -> 6.7.2-lqx1
2024-01-26 22:17:51 +01:00
Jerry Starke
3390aa1aed
linuxKernel.kernels.linux_zen: 6.7.1-zen1 -> 6.7.2-zen1
2024-01-26 22:16:32 +01:00
Kiskae
2817ffc8e1
linuxPackages_latest.nvidiaPackages.{latest,vulkan_beta}.open: broken on 6.7
2024-01-26 18:05:51 +01:00
R. Ryantm
3f5f020da5
pcm: 202311 -> 202401
2024-01-26 16:41:12 +01:00
Maximilian Bosch
704180bbbb
Merge pull request #283883 from alyssais/linux-5.10.209
...
Linux kernels 2024-01-25
2024-01-26 12:12:47 +01:00
Nick Cao
6620368452
Merge pull request #283804 from Kiskae/nvidia/535.43.23
...
linuxPackages.nvidiaPackages.vulkan_beta: 535.43.22 -> 535.43.23
2024-01-25 22:10:36 -05:00
Alyssa Ross
e264cdc38b
linux_6_1: 6.1.74 -> 6.1.75
2024-01-26 01:43:12 +01:00
Alyssa Ross
f8f2cdd2c7
linux_6_6: 6.6.13 -> 6.6.14
2024-01-26 01:42:58 +01:00
Alyssa Ross
02c63fa701
linux_6_7: 6.7.1 -> 6.7.2
2024-01-26 01:42:47 +01:00
R. Ryantm
914bb49f4e
bpftrace: 0.19.1 -> 0.20.0
2024-01-26 01:06:23 +01:00
Alyssa Ross
249fef32c4
linux_5_15: 5.15.147 -> 5.15.148
2024-01-26 00:37:55 +01:00
Alyssa Ross
bf749233db
linux_4_19: 4.19.305 -> 4.19.306
2024-01-26 00:11:45 +01:00
Alyssa Ross
214ce1fd7a
linux_5_4: 5.4.267 -> 5.4.268
2024-01-26 00:11:33 +01:00
Alyssa Ross
749faf6609
linux_5_10: 5.10.208 -> 5.10.209
2024-01-26 00:11:17 +01:00
K900
aeda66611b
Revert "mdevctl: 1.2.0 -> 1.3.0"
2024-01-25 22:25:39 +03:00
Kiskae
c789a32040
linuxPackages.nvidiaPackages.vulkan_beta: 535.43.22 -> 535.43.23
2024-01-25 18:42:38 +01:00
Nick Cao
d559047519
Merge pull request #283562 from Kiskae/nvidia/550.40.07
...
linuxPackages.nvidiaPackages.beta: 545.23.06 -> 550.40.07
2024-01-25 08:53:25 -05:00
Nick Cao
e9780ce6c6
Merge pull request #283573 from NickCao/uhk-agent
...
uhk-agent: 3.2.2 -> 3.3.0
2024-01-25 07:57:29 -05:00
Nick Cao
31766fca35
Merge pull request #283729 from trofi/nvidia-x11-revert-useLibs-assert
...
nvidia-x11: revert "add an assert that `useSettings` implies more tha…
2024-01-25 07:24:43 -05:00
github-actions[bot]
8c2ba7797a
Merge master into staging-next
2024-01-25 12:01:19 +00:00
Naïm Favier
6d11e88fed
Merge pull request #280945 from katexochen/treewide/unref-patches
...
treewide: cleanup unreferenced patch files
2024-01-25 12:42:50 +01:00
Sergei Trofimovich
b2ee4908ad
nvidia-x11: revert "add an assert that useSettings
implies more than libsOnly
"
...
THe change caused nixGL instantiation failures:
- https://github.com/nix-community/nixGL/issues/157
- https://github.com/nix-community/nixGL/issues/154
I missed the fact that there is no easy way to oberride `useSettings` as
it's an internal argument as ollosed to `useLibs`.
Instead of fixing it let's revert it back and try again later.
This reverts commit 9c51fb0606
.
2024-01-25 10:09:22 +00:00
Vladimír Čunát
a763026780
linux-pam: fixup build on musl
...
In particular, nixStatic was blocked by this.
https://hydra.nixos.org/build/247250976/nixlog/46/tail
2024-01-25 09:16:25 +01:00
R. Ryantm
81dbffe493
fwts: 23.11.00 -> 24.01.00
2024-01-25 07:54:41 +00:00
github-actions[bot]
a4b5a14b07
Merge master into staging-next
2024-01-25 00:02:13 +00:00
Alyssa Ross
0a95fd24f0
Merge remote-tracking branch 'origin/master' into staging-next
...
Conflicts:
pkgs/development/libraries/libunwind/default.nix
2024-01-24 22:00:49 +01:00
Nick Cao
81294f9c6c
uhk-agent: 3.2.2 -> 3.3.0
...
Diff: https://github.com/UltimateHackingKeyboard/agent/compare/v3.2.2...v3.3.0
2024-01-24 14:34:21 -05:00