377c851395
linux: 3.18.36 -> 3.18.40
2016-08-26 14:47:45 +02:00
dc37edb36c
linux: 3.14.73 -> 3.14.77
2016-08-26 14:47:45 +02:00
458d477215
linux: 3.12.61 -> 3.12.62
2016-08-26 14:47:45 +02:00
7e631101b9
lxc: 2.0.3 -> 2.0.4
2016-08-26 13:43:35 +02:00
7b01df18a2
kernel: config: enable DRM_AMD_POWERPLAY
2016-08-26 08:45:49 +02:00
2b1fa9da8b
Add initial patches for CPU Controller on Control Group v2
2016-08-25 13:01:40 -04:00
7fd44eafa6
Merge pull request #17817 from mbrock/libselinux-fix
...
libselinux: fix Python binding
Built and tested locally.
2016-08-25 12:43:19 +02:00
eddc0a5549
treewide: fix darwin builds by using getOutput
...
This fixes eval for pkgs referring to optional static output
2016-08-25 08:44:20 +00:00
df275f5b85
treewide: fix darwin builds by referring to stdenv's libc
2016-08-25 02:56:25 +02:00
29ec1c6b09
audit: 2.4.4 -> 2.6.6
2016-08-25 01:56:36 +02:00
f0f95d03ca
utillinux: 2.28 -> 2.28.1
2016-08-25 01:55:42 +02:00
3ce7b77517
libnl: 3.2.27 -> 3.2.28
2016-08-25 01:55:41 +02:00
a30bf645f2
sinit: 0.9.2 -> 1.0, fix glibc static linking
2016-08-24 21:31:02 +02:00
d5189fb7ad
lxc: 2.0.3 -> 2.0.4, fixes hardened build
2016-08-24 21:31:02 +02:00
c26de11551
linuxPackages.perf: fix build with new glibc and remove hack
...
elfutils now adds a eu- prefix to avoid collisions
2016-08-24 19:19:02 +00:00
8b8a74d5d6
Merge pull request #17864 from LnL7/darwin-libsecurity
...
darwin.libsecurity: fix for gnustep makefiles
2016-08-24 19:56:24 +02:00
9e47acb89d
otpw: disable stackprotector hardening
2016-08-24 17:19:43 +00:00
8b9b9fad31
Revert "Revert "Merge branch 'modprobe-fix' of git://github.com/abbradar/nixpkgs""
...
Revert a revert of a merge that shouldn't have been in master but was intentionally in staging.
Next time I'll do this right after the revert instead of so far down the line...
This reverts commit 9adad8612b
2016-08-24 07:35:30 -04:00
0e8d2725dc
Merge branch 'master' into staging
2016-08-23 18:50:06 +01:00
cf592a8969
grsecurity: 4.7.1-201608161813 -> 4.7.2-201608211829
2016-08-23 01:49:34 +02:00
24a9183f90
Merge branch 'hardened-stdenv' into staging
...
Closes #12895
Amazing work by @globin & @fpletz getting hardened compiler flags by
enabled default on the whole package set
2016-08-22 01:19:35 +01:00
ba50fd7170
Merge branch 'master' into staging
2016-08-22 01:18:11 +01:00
175028582c
linux: 4.7.1 -> 4.7.2
2016-08-21 13:56:45 +00:00
a9e913ffbf
darwin.security_tool: fix for gnustep makefiles
2016-08-20 13:43:58 +02:00
0ec2ba9497
darwin.libsecurity: fix for gnustep makefiles
2016-08-20 13:32:10 +02:00
1f50e2412f
libselinux: fix Python binding
...
Applies unreleased patch from upstream.
2016-08-19 19:06:25 +03:00
2abe917f18
kmod: 22 -> 23, add /lib/modules to module directories
2016-08-19 17:57:08 +03:00
ff22705793
treewide: replace several /sbin paths by /bin
2016-08-19 17:56:45 +03:00
30c9aa2698
kmod: add patch to allow searching for modules in several directories
2016-08-19 17:56:39 +03:00
1047ed49d9
Merge branch 'master' into staging
...
Conflicts: pkgs/os-specific/linux/kmod/default.nix cc @abbradar
2016-08-19 15:28:58 +01:00
bd68309643
kernel config: Enable SECCOMP
...
This is used by systemd >= 231 and is not enabled in the ARM
multiplatform defconfig.
2016-08-18 16:33:46 +03:00
66a3f0e988
gradm: 3.1-201607172312 -> 3.1-201608131257
2016-08-17 15:19:33 +02:00
ba20363f11
grsecurity: 4.7-201608151842 -> 4.7.1-201608161813
2016-08-17 15:19:27 +02:00
2571438988
linux: 4.7 -> 4.7.1
2016-08-17 05:46:00 +02:00
7a4407461b
linux: 4.6.6 -> 4.6.7
...
Fixes CVE-2016-5696.
2016-08-17 05:45:59 +02:00
da95fb368c
linux: 4.4.17 -> 4.4.18
...
Fixes CVE-2016-5696.
2016-08-17 05:45:59 +02:00
2104d28bcd
linux: 4.1.27 -> 4.1.30
...
Fixes CVE-2016-5696.
2016-08-17 05:45:59 +02:00
5a501bd828
Remove top-level dbus_python and pythonDBus.
...
See #11567 .
Furthermore, it renames pythonPackages.dbus to pythonPackages.dbus-
python as that's the name upstream uses.
There is a small rebuild but I couldn't figure out the actual cause.
2016-08-16 22:52:37 +02:00
40da4e6ce7
fix eval
2016-08-16 22:30:15 +02:00
f396a0b4d0
hd-idle: init at 1.05
2016-08-16 21:59:14 +02:00
d82ddd6dc0
grsecurity: 4.7-201608131240 -> 4.7-201608151842
2016-08-16 17:50:37 +02:00
b1cceeda84
grsecurity: enable pax size overflow plugin
2016-08-16 17:50:36 +02:00
3fcb9e6f57
grsecurity: support non-enforcing mode
...
Until we've made sure that most things actually work out of the box, we
need to give people a way of continuing to use the system without
completely disabling grsecurity.
Set sysctl kernel.pax.softmode=1 or boot with pax.softmode=1
2016-08-16 17:50:36 +02:00
33e1c78ae3
Merge remote-tracking branch 'upstream/master' into hardened-stdenv
2016-08-16 07:54:01 +00:00
081ac25dc6
kmod: 22 -> 23, add /lib/modules to module directories
2016-08-16 02:42:19 +03:00
9adad8612b
Revert "Merge branch 'modprobe-fix' of git://github.com/abbradar/nixpkgs"
...
Was meant to go into staging, sorry
This reverts commit 57b2d1e9b0760b2b9048
2016-08-15 19:05:52 -04:00
57b2d1e9b0
Merge branch 'modprobe-fix' of git://github.com/abbradar/nixpkgs
2016-08-15 19:01:44 -04:00
1afd250676
treewide: replace several /sbin paths by /bin
2016-08-16 00:19:25 +03:00
131fca0a85
kmod: add patch to allow searching for modules in several directories
2016-08-16 00:19:25 +03:00
9062c67914
grsecurity: 4.6.5-201607312210 -> 4.7-201608131240
2016-08-15 20:36:46 +02:00
21df40f85f
systemd-cryptsetup-generator: Fix bug.
...
The annoying wrapper script also wraps `systemd-cryptsetup`. We need to
copy the original binary to $out too.
2016-08-15 12:42:44 +02:00
5b296a1470
Merge branch 'master' into staging
2016-08-15 10:34:28 +03:00
64c79e8526
linux: 4.6.5 -> 4.6.6
2016-08-15 04:28:08 +02:00
2a8718fb0b
linux_4_5: remove, not support by upstream anymore
2016-08-15 04:28:02 +02:00
a37d695c95
linuxPackages.spl: remove unnecessary substituteInPlace
...
`substituteInPlace` was operating on a non-existant file.
Updated to use `autoreconfHook`.
2016-08-14 22:55:21 +00:00
ea34fe82bc
swift-corefoundation: some cleanup
...
I upstreamed some patches so I'm using those now
2016-08-14 18:22:19 -04:00
4705a9a6c1
swift-corefoundation: actually remove spurious dependency
2016-08-14 17:42:03 -04:00
6cf13bfe66
swift-corefoundation: remove spurious buildInput
...
libpthread is part of libSystem, so there's no need to depend on it
explicitly
2016-08-14 17:40:05 -04:00
1861744e7c
swift-corefoundation: init
...
This currently only produces a static library, but is a start :) soon we
might be able to incorporate it into our stdenv, but we need to get the
build system to produce a proper .framework first.
2016-08-14 17:35:44 -04:00
98b5e3a531
darwin.libpthread: fix messed-up header
...
We don't actually need the private headers and the private qos.h was
overwriting the public one, causing weird issues downstream (especially
with Swift's CoreFoundation)
2016-08-14 17:34:55 -04:00
7522de2f4b
btfs: 2.10 -> 2.11 ( #17737 )
...
(cherry picked from commit 340a9571f5
2016-08-14 21:14:20 +00:00
a6c5638565
Revert "btfs: 2.10 -> 2.11 ( #17737 )"
...
This reverts commit 340a9571f5
2016-08-14 21:12:21 +00:00
340a9571f5
btfs: 2.10 -> 2.11 ( #17737 )
2016-08-14 22:48:56 +02:00
3e84cbc4ca
autofs5: 5.1.1 -> 5.1.2
2016-08-14 22:39:18 +03:00
c60deb0266
quote homepages for better clickability
...
Done while I was traversing packages which I maintain to save extra clicks on
urxvt (it captures semicolon as a part of URL).
2016-08-14 22:37:10 +03:00
b30f4e5e4f
android-udev-rules: 2016-04-26 -> 20160805
2016-08-14 22:37:10 +03:00
948b7f23bb
darwin.{xnu, Libc}: 10.9 -> 10.11
...
I can't submit this in smaller units because the various components all
depend on one another during the stdenv bootstrap, so I think this is
the smallest sensible change I can make.
I also removed the symbol-hiding shenanigans in Libsystem. It might mess
up compatibility with 10.9 but I don't really want to support the added
complexity and I see little evidence of anyone else wanting to support
it. If someone cares, we might be able to revive compatibility, but for
now it'll stay like this.
2016-08-14 12:53:33 -04:00
f0fef4defb
wireguard-unstable: 2016-07-22 -> 2016-08-08 ( #17727 )
2016-08-14 10:47:16 +00:00
99cb230b47
Merge remote-tracking branch 'upstream/master' into hardened-stdenv
2016-08-14 09:09:20 +00:00
8071cafe66
linuxPackages.rtl8812au: fix build
2016-08-14 08:59:55 +00:00
2676cf9525
linuxPackages.lttng-modules: fix build
2016-08-14 08:59:19 +00:00
a7f8787dbd
Merge pull request #17705 from womfoo/bump/hwdata-0.291
...
hwdata: 0.276 -> 0.291
2016-08-13 17:00:08 +02:00
bd4490e277
Merge branch 'master' into hardened-stdenv
2016-08-13 16:59:55 +02:00
fa3a35b241
linuxPackages.fusionio-vsl: disable pic hardening (still broken)
2016-08-13 16:55:26 +02:00
b2c6d28a1d
linuxPackages.ndiswrapper: disable pic hardening (still broken)
2016-08-13 16:50:43 +02:00
9e7d118ea2
linuxPackages.nvidia-x11: disable pic & format hardening
2016-08-13 16:49:42 +02:00
5103e70a37
linuxPackages.nvidiabl: disable pic hardening
2016-08-13 16:44:39 +02:00
73a9ce2ce3
linuxPackages.psmouse_alps: remove, driver in kernel since 3.9
2016-08-13 16:42:35 +02:00
62e6bc0bd9
linuxPackages.prl-tools: disable pic hardening
2016-08-13 16:40:42 +02:00
f55fd87c8a
linuxPackages.ixgbevf: disable pic hardening
2016-08-13 16:30:35 +02:00
5e085b7fea
linuxPackages.e1000e: disable pic hardening
2016-08-13 16:25:29 +02:00
d836b811cb
linuxPackages.cryptodev: 1.6 -> 1.8, disable pic hardening
2016-08-13 16:24:38 +02:00
f5c9f99877
linuxPackages.ati_drivers_x11: disable pic & format hardening
2016-08-13 16:06:57 +02:00
a8deb8d647
linuxPackages.frandom: disable pic hardening
2016-08-13 16:03:32 +02:00
7d9d2d6872
linuxPackages.broadcom_sta: disable pic hardening
2016-08-13 16:02:02 +02:00
0f274be2fd
linuxPackages.ena: disable pic
2016-08-13 10:12:07 +00:00
1bbcc7e378
hwdata: 0.276 -> 0.291
2016-08-13 10:06:34 +08:00
fda17cfd0e
Merge pull request #17703 from womfoo/bump/microcode-intel-20160714
...
microcode-intel: 20150121 -> 20160714
2016-08-12 21:44:34 +01:00
050452dd7f
microcode-intel: 20150121 -> 20160714
2016-08-13 03:53:03 +08:00
b2efe2babd
Revert "linux kernel 4.4: fix race during build"
...
Removes patch. Was fixed upstream.
This reverts commit 4788ec1372
2016-08-12 16:42:25 +01:00
b1817fa8a3
linux_mptcp: 0.90.1 (kernel 3.18) -> 0.91 (kernel 4.1) ( #17675 )
2016-08-12 15:14:24 +02:00
b7787d932e
Merge remote-tracking branch 'upstream/master' into hardened-stdenv
2016-08-12 09:46:53 +00:00
18947c9e36
Revert "ecryptfs: fix kernel bug introduced in 4.4.14"
...
The Linux 4.4.17 release fixes the underlying issue
This reverts commit fad9a8841b
2016-08-11 17:15:54 +01:00
b893d84d53
firejail: 0.9.40-rc1 -> 0.9.42-rc1
2016-08-11 17:57:35 +02:00
8b4eb6fa4d
eudev: 3.1.5 -> 3.2
2016-08-11 17:57:35 +02:00
e26ac7afd4
linux: 4.4.16 -> 4.4.17
2016-08-11 15:20:07 +02:00
1cd9c58834
Merge pull request #17461 from rasendubi/powerpc
...
cross-compilation: fixes for powerpc-linux-uclibc
2016-08-11 00:51:51 +01:00
33166b7434
wireguard: require Linux >= 4.1 for module build ( #17632 )
2016-08-11 00:25:57 +02:00
111d7a2af4
Merge pull request #17623 from matthewbauer/misc
...
Misc. hydra fixes
2016-08-10 11:35:44 +02:00
bba9728cd6
jool: 3.4.2 -> 3.4.4
2016-08-10 07:12:08 +02:00
Franz Pletz
Michael Raskin
Gabriel Ebner
Shea Levy
Lancelot SIX
Robin Gloster
Daiderd Jordan
obadz
Joachim Fasting
Tim Steinbach
Mikael Brockman
Nikolay Amiantov
Tuomas Tynkkynen
Frederik Rietdijk
Domen Kožar
Robert Helgesson
Moritz Ulrich
Dan Peebles
Michele Guerini Rocco
Eric Sagnes
Kranium Gikos Mendoza
Luca Bruno
Guillaume Maudoux
Eelco Dolstra
Frederik Rietdijk