Joachim Fasting d4d7bfe07b grsecurity: add option to disable chroot caps restriction ...

The chroot caps restriction disallows chroot'ed processes from running
any command that requires `CAP_SYS_ADMIN`, breaking `nixos-rebuild`. See
e.g., https://github.com/NixOS/nixpkgs/issues/15293

This significantly weakens chroot protections, but to break
nixos-rebuild out of the box is too severe.

2016-05-10 16:17:08 +02:00

..

agda

…

build-dotnet-package

…

build-fhs-chrootenv

buildFHSEnv: post-closure-size fix

2016-04-13 14:28:33 +03:00

build-fhs-userenv

userFHSEnv: add passthru, rename meta

2016-04-03 04:19:58 +03:00

buildenv

buildEnv: fix #14682 evaluation in some edge cases

2016-04-17 08:57:17 +02:00

builder-defs

…

cc-wrapper

Merge 'staging' into closure-size

2016-04-07 14:40:51 +02:00

docker

dockerTools: only add "/nix" if it exists

2016-04-16 01:16:49 +10:00

dotnetbuildhelpers

Remove all-packages.nix helperFunctions dependency.

2016-03-20 16:41:20 +00:00

dotnetenv

…

emacs

emacsWithPackages: reduce some duplication

2016-04-03 21:21:50 +02:00

fetchadc

…

fetchbower

bower2nix: 2.1.0 -> 3.0.1

2016-03-28 08:23:06 +01:00

fetchbzr

…

fetchcvs

…

fetchdarcs

…

fetchegg

…

fetchfile

…

fetchgit

nix-prefetch-git: fix url_to_name heuristic

2016-03-23 11:22:51 +00:00

fetchgitlocal

fetchgitlocal: be less chatty

2016-02-01 10:57:01 -08:00

fetchgitrevision

…

fetchhg

nix-prefetch-hg: Various bash style improvements, fixes #9511

2016-02-17 00:35:30 +01:00

fetchmtn

…

fetchnuget

…

fetchpatch

…

fetchsvn

fetchsvn: correctly handle trailing slashes

2015-12-06 11:49:51 -06:00

fetchsvnrevision

…

fetchsvnssh

…

fetchurl

Add mirror://mozilla scheme

2016-05-09 19:37:22 +02:00

fetchzip

Merge pull request #8576 from obadz/nix-prefetch-zip

2016-02-26 00:57:30 +00:00

gcc-cross-wrapper

…

gcc-wrapper-old

Merge master into closure-size

2016-03-08 09:58:19 +01:00

grsecurity

grsecurity: add option to disable chroot caps restriction

2016-05-10 16:17:08 +02:00

icon-conv-tools

icon-conv-tools: init at 0.0.0 (#13905)

2016-04-25 13:16:47 +02:00

kdewrapper

…

kernel

makeModulesClosure: Small cleanup

2016-02-01 18:19:23 +01:00

libredirect

…

make-desktopitem

chromium: add StartupWMClass to desktop file. Fixes #12433

2016-02-29 20:42:58 +01:00

make-startupitem

…

make-symlinks

…

mono-dll-fixer

…

nuke-references

…

ocaml

Ensure that we can evaluate the platform attribute of ocaml packages.

2016-03-13 19:08:26 +00:00

release

build-support/source-tarball.nix: fix syntax highlighting in Emacs

2016-01-26 14:03:06 +01:00

rust

fetch-cargo-deps: factor into fetchCargoDeps function

2016-02-25 14:05:44 +03:00

setup-hooks

Remove obsolete scatter output hook

2016-04-30 22:05:33 +01:00

src-only

…

substitute

…

substitute-files

…

templaterpm

…

upstream-updater

…

vm

vmTools.diskImages: add ubuntu 16.04

2016-04-29 11:50:27 +01:00

vsenv

…

build-maven.nix

build-maven: use lib.importJSON

2016-02-29 13:49:29 +00:00

build-pecl.nix

…

replace-dependency.nix

nix: Add a "dev" output

2016-04-18 21:13:18 +02:00

source-from-head-fun.nix

…

trivial-builders.nix

symlinkJoin: accept set as an argument with additional options

2016-04-26 15:37:42 +03:00