Commit Graph

1892 Commits

Author SHA1 Message Date
Franz Pletz
aff1f4ab94 Use general hardening flag toggle lists
The following parameters are now available:

  * hardeningDisable
    To disable specific hardening flags
  * hardeningEnable
    To enable specific hardening flags

Only the cc-wrapper supports this right now, but these may be reused by
other wrappers, builders or setup hooks.

cc-wrapper supports the following flags:

  * fortify
  * stackprotector
  * pie (disabled by default)
  * pic
  * strictoverflow
  * format
  * relro
  * bindnow
2016-03-05 18:55:26 +01:00
Franz Pletz
a2e449e43e coreutils: Skip some tests (filenames too long) 2016-03-05 18:55:26 +01:00
Tristan Helmich
c3096a4160 memtest86+: disable pic/stackprotector hardening 2016-03-04 14:56:58 +01:00
Robin Gloster
2f7e9f26d8 gummiboot: disable stackprotector hardening 2016-03-01 22:21:21 +00:00
Robin Gloster
d47857c3d9 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-03-01 21:09:17 +00:00
Pascal Wittmann
5a0dbaabad parallel: 20160122 -> 20160222 2016-02-29 23:35:32 +01:00
Robin Gloster
3b4765c9e5 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-02-28 16:32:57 +00:00
rnhmjoj
838379f117 bdf2psf: 1.134 -> 1.137 2016-02-28 02:56:22 +01:00
zimbatm
17348dc094 Remove all dots at end of descriptions
Specially crafted for @JagaJaga

    find pkgs -name "*.nix" -exec \
      sed -e 's|\(description.*\)\.";|\1";|g' -i {} \;
2016-02-27 17:30:29 +00:00
Robin Gloster
3477e662e6 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-02-27 00:08:08 +00:00
zimbatm
35ab3d301f Merge remote-tracking branch 'upstream/staging' 2016-02-26 22:37:04 +00:00
Tristan Helmich
3234ca49d1 gti: init at 2015-05-21 (edaac79) 2016-02-25 18:52:19 +01:00
Vladimír Čunát
93f6af1071 Merge branch 'master' into staging 2016-02-25 09:01:48 +01:00
Robin Gloster
d9b4391717 grub: disable stackprotector hardening 2016-02-24 22:54:34 +00:00
Robin Gloster
e7f9e8a26f trustedGrub: disable stackprotector/pic hardening 2016-02-24 16:54:49 +00:00
Frederik Rietdijk
40ca841c5c Merge pull request #13124 from FRidh/buildPythonApplication
buildPythonApplication: use new function for Python applications
2016-02-23 16:02:10 +01:00
Robin Gloster
402d57ee8e bootstrap env: disable stackprotector hardening until gcc >=4.9 2016-02-22 18:32:53 +00:00
Franz Pletz
06e37e9008 youtube-dl: 2016.01.01 -> 2016.02.13 2016-02-22 04:55:22 +01:00
Robin Gloster
bb2639aafc Merge branch 'curl-7.15-fixup' of https://github.com/zimbatm/nixpkgs into hardened-stdenv 2016-02-22 01:14:22 +00:00
Robin Gloster
828b408f7f ipxe: turn off pic/stackprotector hardening 2016-02-22 00:44:58 +00:00
Eugene Akentyev
f0b072abaa staruml: init at 2.6.0 2016-02-21 21:42:43 +03:00
Robin Gloster
58c377b9aa kde5.calamares: 1.0 -> 1.1.4.2
fixes build and removes obsolete PIC handling
2016-02-21 10:06:49 +00:00
Charles Strahan
11bf7888fb Merge pull request #13041 from Baughn/mprime
mprime: Init at 28.7
2016-02-20 20:45:56 -05:00
Tuomas Tynkkynen
6820d7fc5b Merge pull request #13157 from dezgeg/pr-diffoscope-2
diffoscope: 45 -> 49
2016-02-21 01:34:38 +02:00
Tuomas Tynkkynen
2a3d8fc70c diffoscope: 45 -> 49
We have a new tool dependency for cd-iccdump which comes from the colord
package - put this in the bloat category.
2016-02-21 01:21:12 +02:00
Robin Gloster
00c53f31c2 xfstests: turn off format hardening 2016-02-20 21:58:30 +00:00
Tuomas Tynkkynen
8bfc5d7e72 coreutils: Remove ARM patch (coreutils-tail-inotify-race.patch)
The patch no longer applies as it's applied in the 8.25 release.

While at it don't use FORCE_UNSAFE_CONFIGURE on ARM as I don't see why
it's needed and it works for me without it.

Build-tested GNU hello on ARMv7 and verified that this affect its hash
on i686.
2016-02-20 19:36:21 +02:00
Robin Gloster
bc21db3692 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-02-19 21:16:14 +00:00
Frederik Rietdijk
4d06bf70f4 buildPythonApplication: use new function for Python applications 2016-02-19 13:16:41 +01:00
Damien Cassou
dda9f0ba23 Merge pull request #13098 from DamienCassou/vdirsyncer-0.9.0
vdirsyncer: 0.8.1 -> 0.9.0
2016-02-19 12:48:27 +01:00
Damien Cassou
38f0628928 vdirsyncer: 0.8.1 -> 0.9.0 2016-02-19 12:44:49 +01:00
Eelco Dolstra
854c27c69c coreutils: 8.24 -> 8.25 2016-02-18 21:59:11 +01:00
Rob Vermaas
1ecb2a8782 Fix xclip hash, make revision explicit, in stead of depending on HEAD.
(cherry picked from commit c9ef3b51a3)
2016-02-17 12:00:20 +00:00
Vladimír Čunát
e9520e81b3 Merge branch 'master' into staging 2016-02-17 10:06:31 +01:00
Franz Pletz
0884b63e53 Merge pull request #13039 from rycee/bump/svtplay-dl
svtplay-dl: 0.30.2016.01.10 -> 0.30.2016.02.08
2016-02-17 04:52:43 +01:00
Ricardo M. Correia
957ed2c08c Merge pull request #13015 from ehegnes/exa
exa: init at git 2016-02-15
2016-02-16 18:11:42 +01:00
Svein Ove Aas
6efcbd8950 mprime: Init at 28.7 2016-02-16 16:37:45 +00:00
Robert Helgesson
b60ceea903 svtplay-dl: 0.30.2016.01.10 -> 0.30.2016.02.08 2016-02-16 17:06:48 +01:00
Arseniy Seroka
c98602d281 Merge pull request #13031 from matthiasbeyer/update-packages
Update packages
2016-02-16 19:02:58 +03:00
Eric Hegnes
23ab6bf6b2 exa: init at git 2016-02-15 2016-02-16 11:02:38 -05:00
Matthias Beyer
acd75605a2 vdirsyncer: 0.8.1 -> 0.9.0 2016-02-16 14:13:53 +01:00
Franz Pletz
41698c9efa Merge branch 'master' into hardened-stdenv 2016-02-15 20:05:29 +01:00
Tobias Geerinckx-Rice
6b9ae8bada debian_devscripts: 2.15.10 -> 2.16.1
Changes:
http://metadata.ftp-master.debian.org/changelogs/main/d/devscripts/devscripts_2.16.1_changelog
2016-02-15 03:33:44 +01:00
Robin Gloster
37cd2e6e21 pal: turn off format hardening 2016-02-12 13:53:04 +00:00
Robin Gloster
bc30a0ee71 gbdfed: turn off format hardening 2016-02-11 00:25:47 +00:00
Robin Gloster
667518fc3b detox: turn off format hardening 2016-02-10 23:27:39 +00:00
Eelco Dolstra
e2eca0c24c Fix misspelled meta.maintainers attributes 2016-02-10 23:27:34 +00:00
Pascal Wittmann
d98f0ea720 progress: 0.12.1 -> 0.13 2016-02-10 23:27:28 +00:00
Eelco Dolstra
aea262f654 Fix misspelled meta.maintainers attributes 2016-02-10 14:59:50 +01:00
Pascal Wittmann
ee90c703be progress: 0.12.1 -> 0.13 2016-02-09 21:51:41 +01:00