Commit graph

3891 commits

Author SHA1 Message Date
Andrey Arapov
96063873e2 checksec: use binutils instead of elfutils
readelf which makes most of checks should come from binutils package instead of elfutils

E.g. the PIE check from checksec, different readelf gives different result:
(elfutils)
$ /nix/store/rgrji20513g19ci0sa6jydm86gpf4j42-elfutils-0.158/bin/readelf -d /nix/store/q1sbn93v4k3166s091s9biygv9srv8qa-nginx-1.6.2/bin/nginx
2>/dev/null |grep -q '(DEBUG)' ; echo $?
1

(binutils)
$ /nix/store/b8qhjrwf8sf9ggkjxqqav7f1m6w83bh0-binutils-2.23.1/bin/readelf -d /nix/store/q1sbn93v4k3166s091s9biygv9srv8qa-nginx-1.6.2/bin/nginx
2>/dev/null | grep -q '(DEBUG)' ; echo $?
0
2015-04-05 21:13:26 +02:00
Michael Raskin
93bf2f8ba9 Update firejail 2015-04-05 20:27:25 +03:00
Nikolay Amiantov
8220246beb bbswitch: add patch to fix Lenovo t440p 2015-04-05 16:12:34 +03:00
William A. Kennington III
8c330acec8 zfs_git: 2015-03-25 -> 2015-04-03 2015-04-04 20:12:38 -07:00
William A. Kennington III
f64ddc181c spl_git: 2015-03-25 -> 2015-04-03 2015-04-04 20:11:08 -07:00
William A. Kennington III
bfe79e4b9a kernel: 3.18.10 -> 3.18.11 2015-04-04 19:47:21 -07:00
William A. Kennington III
c0cb4e1ef7 nixos/nvidia: Add a temporary hack to support kernel 4.0 2015-04-03 21:53:34 -07:00
William A. Kennington III
18c9619021 nvidia: Add beta driver 2015-04-03 21:53:12 -07:00
Austin Seipp
d61561e381 nixpkgs: pax-utils 1.0.2 -> 1.0.3
Signed-off-by: Austin Seipp <aseipp@pobox.com>
2015-04-02 16:27:52 -05:00
Austin Seipp
1b338edc80 nixpkgs: musl 1.1.7 -> 1.1.8
Signed-off-by: Austin Seipp <aseipp@pobox.com>
2015-04-02 16:27:52 -05:00
William A. Kennington III
e05b68ed05 More cleanups of sw/sbin 2015-04-01 14:26:22 -07:00
William A. Kennington III
ff21171921 Fix references to current-system/sw/sbin 2015-04-01 13:57:36 -07:00
aszlig
8664aea63d
Revert "mdadm: 3.3 -> 3.3.2".
This reverts commit 7719f7f23b, again!

It prevents systems from booting, for two reasons:

  * The initrd size is going to explode, but I think this is not the
    REAL issue. We had that in 666cf99 already, which reverted this
    update already.
  * Another reason I don't yet know, which is the REAL issue. We need to
    investigate and fix that before attempting another update.

Because of that I've also added a small comment before the src attribute
to prevent further updates like this.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2015-04-01 17:59:09 +02:00
William A. Kennington III
5bf407ada4 linux-testing: 4.0-rc4 -> 4.0-rc6 2015-03-31 14:28:42 -07:00
lethalman
fed2cf85ec Merge pull request #7065 from pmahoney/skarnet-2015-03-28
update s6, execline, other skarnet.org
2015-03-30 17:57:41 +02:00
Arseniy Seroka
c1d5eee053 Merge pull request #7071 from oxij/conky-options
conky: add lua-imlib2 and lua-cairo support, add more options, change defaults
2015-03-30 17:36:38 +03:00
William A. Kennington III
c9bbf2228f Merge pull request #7069 from taktoa/master
Fixed grsecurity path patch for testing (3.19)
2015-03-30 02:36:34 -07:00
Jan Malakhovski
8591b7b48c conky: add lua-imlib2 and lua-cairo support, add more options, rename old ones so that they would conform to a common standard, make the defaults for a "normal desktop user" 2015-03-29 23:23:29 +00:00
Domen Kožar
c31f1d99a5 fix linux 3.2/3.4 builds 2015-03-29 21:41:05 +02:00
Remy Goldschmidt
d567e12eb7 Fix grsec-path.patch (2) 2015-03-29 14:26:11 -04:00
Remy Goldschmidt
d68e248418 Fixed grsec-path.patch 2015-03-29 14:26:00 -04:00
Nikolay Amiantov
fb8ed6efd4 ocz-toolbox: remove (obsoleted by SSD Guru) 2015-03-29 13:05:28 +03:00
Nikolay Amiantov
f0c54d671a android-udev-rules: update 2015-03-29 13:05:28 +03:00
Patrick Mahoney
00b57f47c7 Update versions of skarnet.org packages
skalibs            2.3.2.0
execline           2.1.1.0
s6                 2.1.3.0
st-portable-utils  2.0.4.0
s6-linux-utils     2.0.2.0
s6-networking      2.1.0.0

Also change path to s6 static library in s6-networking build.
2015-03-28 23:13:45 -05:00
Arseniy Seroka
a639c710ae Merge pull request #6968 from oxij/unquestionably-good
Easy to check to be unquestionably good changes
2015-03-28 13:16:13 +03:00
William A. Kennington III
123bde971e zfs_git: 2015-03-20 -> 2015-03-25 2015-03-27 15:52:44 -07:00
William A. Kennington III
c7bf9d2749 spl_git: 2015-03-20 -> 2015-03-25 2015-03-27 15:50:47 -07:00
Michael Raskin
57d9198552 Adding Bluez 5.28; 5.29 breaks LibreOffice build 2015-03-28 01:13:53 +03:00
William A. Kennington III
304b3c077c kernel: 3.14.36 -> 3.14.37 2015-03-27 10:45:13 -07:00
William A. Kennington III
ca12b0b304 kernel: 3.19.2 -> 3.19.3 2015-03-27 10:44:19 -07:00
William A. Kennington III
7a9e7905db kernel: 3.10.72 -> 3.10.73 2015-03-27 10:42:28 -07:00
William A. Kennington III
26c7e2605e lxc: 1.0.7 -> 1.1.1 2015-03-26 18:16:43 -07:00
William A. Kennington III
702590081b cgmanager: Add derivation 2015-03-26 18:16:37 -07:00
William A. Kennington III
7719f7f23b mdadm: 3.3 -> 3.3.2 2015-03-26 17:40:11 -07:00
William A. Kennington III
82eb45bf99 bluez5: 5.25 -> 5.29 2015-03-26 17:32:02 -07:00
William A. Kennington III
65e303570e macchanger: 1.6.0 -> 1.7.0 2015-03-26 15:04:44 -07:00
William A. Kennington III
c99fa3a261 musl: 1.1.6 -> 1.1.7 2015-03-26 13:12:57 -07:00
William A. Kennington III
09ca343089 hostapd: 2.3 -> 2.4 2015-03-26 12:30:51 -07:00
William A. Kennington III
08995697de usbutils: 007 -> 008 2015-03-26 12:00:34 -07:00
William A. Kennington III
4febebe9cf hwdata: 249 -> 276 2015-03-26 12:00:34 -07:00
William A. Kennington III
ab131767d1 lvm2: 2.02.114 -> 2.02.118 2015-03-26 11:42:32 -07:00
William A. Kennington III
8ca8b0868c cryptsetup: 1.6.3 -> 1.6.7 2015-03-26 11:42:32 -07:00
Jan Malakhovski
89bfacdf90 kernel: add a warning/note at the top of common-config so that people would hopefully stop breaking the older kernels 2015-03-26 12:43:42 +00:00
William A. Kennington III
ace8dfa22c linuxFirmwareNonfree: 3015-03-09 -> 2015-03-20 2015-03-25 14:46:49 -07:00
William A. Kennington III
27f355c1e3 microcode-amd: Update to early loading 2015-03-25 14:44:19 -07:00
William A. Kennington III
79827eb8f5 firmware-linux-nonfree: Support version passthru 2015-03-25 14:43:50 -07:00
William A. Kennington III
8ad832f96a microcode/intel: Correct license 2015-03-25 14:28:32 -07:00
William A. Kennington III
c14919ff61 Remove old microcode2ucode 2015-03-25 14:25:04 -07:00
William A. Kennington III
1e1683f4ae Add missing file 2015-03-25 14:17:22 -07:00
William A. Kennington III
8baaff95e6 intel-ucode: Generate an early loadable microcode image 2015-03-25 14:14:46 -07:00
William A. Kennington III
4d47c0dd24 kernel-config: Add microcode support + early loading on new kernels 2015-03-25 11:30:03 -07:00
William A. Kennington III
a040e15a48 kernel: 3.18.9 -> 3.18.10 2015-03-25 11:24:47 -07:00
Bjørn Forsman
ff9bc81946 lttng-modules: update to latest stable (fixes build)
Fixes build against linux 3.14.36+.

Also
* It works with linux 3.12 now, so remove that assert
* Remove unneeded patches (merged upstream)
2015-03-24 07:10:12 +01:00
Ricardo M. Correia
232b434bc4 gradm: Update from 3.1-201502222102 -> 3.1-201503211320 2015-03-24 03:47:27 +01:00
William A. Kennington III
786f3216bc zfs_git: 2015-03-12 -> 2015-03-20 2015-03-22 12:20:53 -07:00
William A. Kennington III
d071563006 spl_git: 2015-03-03 -> 2015-03-20 2015-03-22 12:20:38 -07:00
Mathijs Kwik
5cac50b3bf kernel: add support for experimental Realtek2800 models
tested with AVM Fritz wlan Stick N
2015-03-22 13:49:29 +01:00
Michael Raskin
d5b558c613 update sysdig 2015-03-21 21:29:39 +03:00
Michael Raskin
15e66fa577 update eudev 2015-03-21 21:29:39 +03:00
Ricardo M. Correia
0f5a5cae76 grsecurity: Update test patch from 3.1-3.19.2-201503182219 -> 3.1-3.19.2-201503201903 2015-03-21 06:23:26 +01:00
William A. Kennington III
6437ad00f0 kernel/common-config: More fixes 2015-03-20 15:05:43 -07:00
William A. Kennington III
6e404cb338 linux-testing: 4.0.0-rc2 -> 4.0.0-rc4 2015-03-20 15:02:01 -07:00
William A. Kennington III
9dc8335294 kernel/common-config: Fix older kernels 2015-03-20 14:41:03 -07:00
William A. Kennington III
36ada70250 kernel: 3.14.35 -> 3.14.36 2015-03-20 14:21:39 -07:00
William A. Kennington III
a7c32c8ea5 kernel: 3.19.1 -> 3.19.2 2015-03-20 14:19:49 -07:00
William A. Kennington III
b9537d17f6 kernel: 3.12.38 -> 3.12.39 2015-03-20 14:16:01 -07:00
William A. Kennington III
0517907801 kernel: 3.10.71 -> 3.10.72 2015-03-20 14:15:59 -07:00
Austin Seipp
3ff22a924f Merge pull request #6871 from joachifm/apparmor-fixups
Apparmor fixups
2015-03-20 15:36:42 -05:00
Eelco Dolstra
2ed5c2bd6b Set some meta.platforms
Also fix meta.platform -> meta.platforms in a few places.
2015-03-20 20:04:42 +01:00
Eelco Dolstra
dda16e0c06 pam_login: Remove
We haven't used/updated this package in years.
2015-03-20 16:38:21 +01:00
Eelco Dolstra
87c86f6711 pam_console: Remove
This package is no longer used in NixOS.
2015-03-20 16:18:10 +01:00
Shea Levy
19cd9f16a0 Merge branch 'staging' 2015-03-20 09:53:34 -04:00
Arseniy Seroka
48e06786fd Merge pull request #6897 from joachifm/apparmor-revdeps
Change uses of apparmor to libapparmor (v2.9)
2015-03-19 19:53:27 +03:00
Eelco Dolstra
cb7b0f3c1b Merge pull request #6898 from joachifm/redundant-params
kernelPatches: remove unused parameters
2015-03-19 15:31:03 +01:00
Joachim Fasting
fa843cdf11 lxc: use AppArmor 2.9 2015-03-19 14:12:15 +01:00
Joachim Fasting
cd55b6b5bb kernelPatches: remove unused parameters 2015-03-19 14:08:16 +01:00
Ricardo M. Correia
5b074d20f8 zfs: Update from 0.6.3-1.2 -> 0.6.3-1.3 2015-03-19 06:08:08 +01:00
Ricardo M. Correia
1e28cd0c83 spl: Update from 0.6.3-1.2 -> 0.6.3-1.3
Removed time.patch (applied upstream).
2015-03-19 06:07:54 +01:00
Bjørn Forsman
5c59b23cef alsa-firmware: longDescription => description 2015-03-18 21:26:20 +01:00
lethalman
626c7d8812 Merge pull request #6835 from bencef/alsa_firmware
Add alsa-firmware package
2015-03-18 15:31:29 +01:00
Joachim Fasting
b0698d4342 apparmor: fixup install locations
This patch fixes install locations for man pages, python modules
and vim scripts. This patch improves but does not fix the user-land
AppArmor utilities (i.e., they can now import the modules they need
but are broken in other ways still).
2015-03-18 12:11:02 +01:00
Joachim Fasting
dc71d5b602 apparmor: factor out common prePatch 2015-03-18 12:08:11 +01:00
Joachim Fasting
a470b2748b Cleanup apparmor expression
Remove excessive whitespace & comments.
2015-03-18 12:07:49 +01:00
Yorick van Pelt
a2dc00c177 nvidiabl: fix for other kernel versions than current
It was using the version of currently *running* kernel (impurely).
Close #6869.
2015-03-18 10:48:45 +01:00
Austin Seipp
b0519234dd nixpkgs: musl 1.1.4 -> 1.1.6
Signed-off-by: Austin Seipp <aseipp@pobox.com>
2015-03-17 20:29:46 -05:00
Austin Seipp
1840694a84 nixpkgs: lockdep 3.17 -> 3.19.1
Signed-off-by: Austin Seipp <aseipp@pobox.com>
2015-03-17 20:29:46 -05:00
Bence Fabian
ba6aee260e remove DESTDIR and don't strip 2015-03-17 20:59:31 +01:00
Bence Fabian
66e5b36378 remove /usr prefix in postInstall 2015-03-17 20:59:31 +01:00
Bence Fabian
90b083d387 Add alsa-firmware package 2015-03-17 20:59:31 +01:00
Vladimír Čunát
e924f05cc3 Merge branch 'master' into staging 2015-03-17 13:35:05 +01:00
Ricardo M. Correia
92501d62f4 zfs_git: Update to 2015-03-12 2015-03-17 03:43:31 +01:00
Austin Seipp
ef95600372 Merge pull request #6771 from joachifm/apparmor-2.9
Apparmor 2.9
2015-03-15 14:16:24 -05:00
Ricardo M. Correia
d848e34616 pax-utils: Update from 1.0.1 -> 1.0.2 2015-03-15 05:16:57 +01:00
Ricardo M. Correia
7c8247a8c5 grsecurity: Update stable and test patches
stable: 3.1-3.14.35-201503071140 -> 3.1-3.14.35-201503092203
test:   3.1-3.18.9-201503071142  -> 3.1-3.19.1-201503122205
2015-03-15 03:49:58 +01:00
Eelco Dolstra
ebef573641 Merge pull request #6476 from ts468/squashfs
Change kernel config: improve squashfs support of kernel
2015-03-12 21:41:53 +01:00
Joachim Fasting
e3b1b09779 Add AppArmor 2.9
The 2.9 series brings features such as support for dbus, unix
abstract sockets, ptrace mediation, and replaces Perl tools
with equivalents implemented in Python. See [1] for details.

The package expression has been changed to build each component
(library, parser) separately. Additionally, Perl is now only
used to build man pages and locale support has been removed.

The user-land tools are currently broken (fail to import the Python module),
but this isn't really a regression, as only two or three of the tools
installed by the previous version were functional. The most important
tool, aa-status, works, however.

Lastly, dbus support is compiled in, but is untested and probably
requires patching of dbus.

[1]: http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0
2015-03-12 11:45:53 +01:00
Eelco Dolstra
fa3bcc4f1c perf: Use libunwind and libbfd
This gives better stack traces.
2015-03-11 18:15:48 +01:00
Eelco Dolstra
798e613e16 kernel: Enable kprobes and other tracing features
All of these should have minimal performance impact unless enabled at
runtime.
2015-03-11 17:14:37 +01:00
Eelco Dolstra
dfc6809215 Add perf-tools 2015-03-11 17:13:23 +01:00
William A. Kennington III
aad4e6fb84 zfs: 2015-03-05 -> 2015-03-10 2015-03-10 11:23:40 -07:00