Commit Graph

27717 Commits

Author SHA1 Message Date
github-actions[bot]
bcf52f9343
Merge staging-next into staging 2024-06-14 12:01:40 +00:00
Timo Kaufmann
f27ac06c8c
Merge pull request #311238 from fairct/remove-broken-from-r8168
linuxPackages.r8168: 8.052.01 -> 8.053.00, remove broken
2024-06-14 10:30:35 +02:00
github-actions[bot]
7f41e5efc9
Merge staging-next into staging 2024-06-13 06:01:38 +00:00
Nick Cao
15ef0de6ed
Merge pull request #318297 from otavio/rtl88x2bu
linuxPackages.rtl88x2bu: unstable-2023-11-29 -> unstable-2024-05-11
2024-06-12 21:04:26 -04:00
github-actions[bot]
ee4da03e6e
Merge staging-next into staging 2024-06-12 18:01:23 +00:00
Vladimír Čunát
9d428a5276
Merge #316075: staging-next 2024-05-31 2024-06-12 18:48:53 +02:00
K900
93fb179750
Merge pull request #300815 from amarshall/linux-common-hardening
linux: set various common hardening config
2024-06-12 19:01:57 +03:00
Otavio Salvador
32a6be9aae linuxPackages.rtl88x2bu: unstable-2023-11-29 -> unstable-2024-06-09
Fixes: #319097.
Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
2024-06-12 11:38:53 -03:00
github-actions[bot]
da355608e2
Merge staging-next into staging 2024-06-12 12:01:37 +00:00
github-actions[bot]
fddadbd234
Merge master into staging-next 2024-06-12 12:01:10 +00:00
Maximilian Bosch
51c2144ca7
linux-rt_5_10: 5.10.217-rt109 -> 5.10.218-rt110 2024-06-12 13:49:14 +02:00
Maximilian Bosch
de7df0d3eb
linux_6_1: 6.1.92 -> 6.1.93 2024-06-12 13:48:27 +02:00
Maximilian Bosch
d1d7003000
linux_6_6: 6.6.32 -> 6.6.33 2024-06-12 13:48:05 +02:00
Maximilian Bosch
ee6d6317b4
linux_6_9: 6.9.3 -> 6.9.4 2024-06-12 13:47:50 +02:00
Peder Bergebakken Sundt
2279c02ec5
Merge pull request #313668 from crayor1/master
autofs: 5.1.6 -> 5.1.9
2024-06-12 12:59:01 +02:00
github-actions[bot]
d4adfab6df
Merge staging-next into staging 2024-06-12 06:01:24 +00:00
github-actions[bot]
e145b7fb56
Merge master into staging-next 2024-06-12 06:01:00 +00:00
Yureka
0b3a8c0684
multipath-tools: clean up derivation (#318745)
The upstream devs have pointed out[^1] that these sed commands are obsolete
and are responsible for issues with building the 0.9.9 release (not tagged yet)

[^1]: https://github.com/opensvc/multipath-tools/pull/85#issuecomment-2153254588
2024-06-12 06:57:36 +02:00
Jörg Rebenstorf
c88d8fe334 autofs: 5.1.6 -> 5.1.9 2024-06-11 17:07:47 +02:00
Andrew Marshall
aa55ab5010 linux: set higher DEFAULT_MMAP_MIN_ADDR for x86_64 & aarch64
Enabled in [Arch][1], [Debian (for x86)][2], [Fedora (x86)][3], [Fedora (aarch64)][4]. Recommended by [Kernel
Self Protection Project][5].

[1]: 6392fb2bed/config (L1153)
[2]: 5f6aa5cb48/debian/config/kernelarch-x86/config (L2076)
[3]: e8025dc0fb/f/kernel-x86_64-fedora.config (_1461)
[4]: e8025dc0fb/f/kernel-aarch64-fedora.config (_1799)
[5]: https://kernsec.org/wiki/index.php?title=Kernel_Self_Protection_Project/Recommended_Settings&oldid=4078
2024-06-11 09:09:24 -04:00
Andrew Marshall
f2f6a3228a linux: enable BUG_ON_DATA_CORRUPTION
Enabled in [Debian][1], [Fedora][2]; not in Arch. Recommended by [Kernel
Self Protection Project][3].

[2]: 5f6aa5cb48/debian/config/config (L7719)
[3]: e8025dc0fb/f/kernel-x86_64-fedora.config (_789)
[4]: https://kernsec.org/wiki/index.php?title=Kernel_Self_Protection_Project/Recommended_Settings&oldid=4078
2024-06-11 09:09:24 -04:00
Andrew Marshall
55d9c320ad linux: enable BUG
Enabled in [Arch][1], [Debian][2], [Fedora][3]. Recommended by [Kernel
Self Protection Project][4].

As it is now in common-config, remove from hardened’s extra config.

[1]: 6392fb2bed/config (L280)
[2]: 5f6aa5cb48/debian/config/config (L6399)
[3]: e8025dc0fb/f/kernel-x86_64-fedora.config (_799)
[4]: https://kernsec.org/wiki/index.php?title=Kernel_Self_Protection_Project/Recommended_Settings&oldid=4078
2024-06-11 09:09:24 -04:00
Andrew Marshall
b6c752bddb linux: enable INIT_ON_ALLOC_DEFAULT_ON
Enabled in [Arch][1], [Debian][2]; not in Fedora. Recommended by [Kernel
Self Protection Project][3].

This can still be disabled with `init_on_alloc=0` boot arg.

As it is now in common-config, remove from hardened’s extra config.

[1]: 6392fb2bed/config (L10859)
[2]: 5f6aa5cb48/debian/config/config (L7718)
[3]: https://kernsec.org/wiki/index.php?title=Kernel_Self_Protection_Project/Recommended_Settings&oldid=4078
2024-06-11 09:09:24 -04:00
Andrew Marshall
b23e741b70 linux: enable SHUFFLE_PAGE_ALLOCATOR
Enabled in [Arch][1], [Fedora][2]; not in Debian. Recommended by [Kernel
Self Protection Project][3].

As it is now in common-config, remove from hardened’s extra config.

[1]: 6392fb2bed/config (L1117)
[2]: e8025dc0fb/f/kernel-x86_64-fedora.config (_6577)
[3]: https://kernsec.org/wiki/index.php?title=Kernel_Self_Protection_Project/Recommended_Settings&oldid=4078
2024-06-11 09:09:24 -04:00
Andrew Marshall
dd666b86ad linux: enable STRICT_KERNEL_RWX & STRICT_MODULE_RWX
Enabled in [Arch][1], [Debian][2], [Fedora][3]. Recommended by [Kernel
Self Protection Project][4].

As it is now in common-config, remove from hardened’s extra config.

[1]: 6392fb2bed/config (L914-917)
[2]: 5f6aa5cb48/debian/config/config (L11-12)
[3]: e8025dc0fb/f/kernel-x86_64-fedora.config (_7449)
[4]: https://kernsec.org/wiki/index.php?title=Kernel_Self_Protection_Project/Recommended_Settings&oldid=4078
2024-06-11 09:09:24 -04:00
Andrew Marshall
ff5cd23067 linux: add space to avoid attributing comments too widely
The comments from the blocks above apply only to a single line, but that
is not necessarily clear. Add blank lines to more clearly narrow the
scope of them.
2024-06-11 09:09:24 -04:00
Andrew Marshall
79c15abc7d linux/hardened: remove redundant config
These are set in common-config.
2024-06-11 09:09:24 -04:00
github-actions[bot]
7d7111ffdb
Merge staging-next into staging 2024-06-11 06:01:38 +00:00
github-actions[bot]
491c6c405d
Merge master into staging-next 2024-06-11 06:01:11 +00:00
K900
cae5fb3e5c syslinux: pick proposed patch to fix build on gnu-efi >= 3.0.17 2024-06-11 07:58:50 +03:00
K900
16736cb3c7
Merge pull request #318828 from K900/linux-firmware-20240610
linux-firmware: 20240513 -> 20240610
2024-06-11 07:48:17 +03:00
github-actions[bot]
f0eb9d7e68
Merge staging-next into staging 2024-06-11 00:02:35 +00:00
github-actions[bot]
79bbeb1aaf
Merge master into staging-next 2024-06-11 00:02:06 +00:00
Nick Cao
88cf973c56
Merge pull request #318639 from codebam/rc3
linux_testing: 6.10-rc2 -> 6.10-rc3
2024-06-10 18:31:14 -04:00
Weijia Wang
652e207126
Merge pull request #313431 from wegank/gnu-efi-bump
gnu-efi: 3.0.15 -> 3.0.18
2024-06-10 20:19:15 +02:00
K900
34e518edbc linux-firmware: 20240513 -> 20240610 2024-06-10 17:58:32 +03:00
github-actions[bot]
e5f5ec1e9c
Merge staging-next into staging 2024-06-10 12:01:42 +00:00
github-actions[bot]
4b24ae6c36
Merge master into staging-next 2024-06-10 12:01:16 +00:00
Sandro
f4a9d6edb4
Merge pull request #309932 from mmlb/update-nvme-cli
libnvme: 1.7.1 -> 1.9; nvme-cli: 2.7.1 -> 2.9.1
2024-06-10 13:50:50 +02:00
Peder Bergebakken Sundt
477cb4d327
Merge pull request #316308 from r-ryantm/auto-update/openiscsi
openiscsi: 2.1.9 -> 2.1.10
2024-06-10 12:52:59 +02:00
github-actions[bot]
c8c2ff3b9b
Merge staging-next into staging 2024-06-10 00:02:49 +00:00
github-actions[bot]
c96a6f10ef
Merge master into staging-next 2024-06-10 00:02:20 +00:00
Sean Behan
c0079b0d8a
linux_testing: 6.10-rc2 -> 6.10-rc3 2024-06-09 18:38:24 -04:00
Sean Behan
4b08ae13db linux_testing: 6.10-rc1 -> 6.10-rc2 2024-06-09 23:17:08 +01:00
Alyssa Ross
3df6bb2c85
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
	pkgs/applications/blockchains/polkadot/default.nix
2024-06-09 22:47:12 +01:00
Alexis Hildebrandt
f8c4a98e8e treewide: Remove the definite article from meta.description
nix run nixpkgs#silver-searcher -- -G '\.nix$' -0l 'description.*"([Tt]he)? ' pkgs \
  | xargs -0 nix run nixpkgs#gnused -- -i '' -Ee 's/(description.*")[Tt]he (.)/\1\U\2/'
2024-06-09 23:08:46 +02:00
Alexis Hildebrandt
755b915a15 treewide: Remove indefinite article from meta.description
nix run nixpkgs#silver-searcher -- -G '\.nix$' -0l 'description.*"[Aa]n?' pkgs \
  | xargs -0 nix run nixpkgs#gnused -- -i '' -Ee 's/(description.*")[Aa]n? (.)/\1\U\2/'
2024-06-09 23:07:45 +02:00
Alexis Hildebrandt
bf995e3641 treewide: Remove ending period from meta.description
nix run nixpkgs#silver-searcher -- -G '\.nix$' -0l 'description.*".*\.";' pkgs \
  | xargs -0 nix run nixpkgs#gnused -- -i '' -Ee 's/(description.*)\.";/\1";/'
2024-06-09 23:04:51 +02:00
github-actions[bot]
507aeeb037
Merge staging-next into staging 2024-06-09 00:03:32 +00:00
github-actions[bot]
4f7f1065a7
Merge master into staging-next 2024-06-09 00:03:04 +00:00