Martin Weinelt
e8988f7a30
nixos/babeld: run as DynamicUser
...
The last bits to prevent babeld from running unprivileged was its
kernel_setup_interface routine, that wants to set per interface
rp_filter. This behaviour has been disabled in a patch that has been
submitted upstream at https://github.com/jech/babeld/pull/68 and reuses
the skip-kernel-setup config option.
→ Overall exposure level for babeld.service: 1.7 OK 🙂
2021-04-25 00:54:52 +02:00
Martin Weinelt
70c96f0e02
babeld: add patch to skip per interface rp_filter setup
...
This is in preparation to run babeld as DynamicUser and was submitted
upstream in https://github.com/jech/babeld/pull/68 and will be part of
the 1.10 release.
2021-04-25 00:51:41 +02:00
Luke Granger-Brown
9839cda8dc
Merge pull request #110897 from LeSuisse/trousers-0.3.15
...
trousers: 0.3.14 -> 0.3.15
2021-04-24 23:43:11 +01:00
Fabian Affolter
fe9a9942e2
home-assistant: enable smartthings tests
2021-04-24 15:28:56 -07:00
Fabian Affolter
55c3640e89
home-assistant: update component-packages
2021-04-24 15:28:56 -07:00
Fabian Affolter
a0755baff3
python3Packages.pysmartthings: init at 0.7.6
2021-04-24 15:28:56 -07:00
Fabian Affolter
bce7201f72
python3Packages.pysmartapp: init at 0.3.3
2021-04-24 15:28:56 -07:00
Michael Weiss
7b79425d84
Merge pull request #120510 from primeos/ungoogled-chromium
...
ungoogled-chromium: 89.0.4389.114 -> 90.0.4430.85
2021-04-25 00:28:33 +02:00
Robert Schütz
d9b11e53b1
python3Packages.angr: extend pythonImportsCheck
2021-04-24 15:27:42 -07:00
markuskowa
d84bf71b62
Merge pull request #120564 from markuskowa/upd-airspy
...
airspy: 1.0.9 -> 1.0.10
2021-04-25 00:04:08 +02:00
Markus Kowalewski
3e1c06654b
airspy: 1.0.9 -> 1.0.10
2021-04-24 22:56:54 +02:00
Lassulus
ea5759474a
Merge pull request #119803 from SuperSandro2000/SuperSandro2000-patch-1
...
nixos/nginx: set isSystemUser
2021-04-24 22:37:46 +02:00
Maximilian Bosch
7b2982e22e
Merge pull request #119498 from mweinelt/tests-bird
...
nixos/test/prometheus-exporters/bird: fix race condition
2021-04-24 21:13:09 +02:00
Martin Weinelt
0ca4f6b739
Merge pull request #120550 from fabaff/smhi
2021-04-24 20:22:21 +02:00
Guillaume Girol
1c62c0f370
Merge pull request #120537 from symphorien/nagios-restart
...
nixos/nagios: use the correct option to restart on config change
2021-04-24 17:58:19 +00:00
Thomas Gerbet
bdb7248944
binwalk: 2.2.0 -> 2.3.1
...
Releases notes:
https://github.com/ReFirmLabs/binwalk/releases/tag/v2.3.1
https://github.com/ReFirmLabs/binwalk/releases/tag/v2.3.0
2021-04-24 10:49:06 -07:00
Lassulus
118485230c
Merge pull request #119725 from helsinki-systems/feat/flexoptix-app
...
flexoptix-app: Init at 5.9.0
2021-04-24 19:34:18 +02:00
Domen Kožar
4b6cd9daa8
Merge pull request #120551 from NixOS/codeowners-workflows
...
Add NixOS/Security as a reviewer for .github/workflows
2021-04-24 18:28:34 +01:00
Martin Weinelt
324f9afad9
Merge pull request #120545 from jonringer/bump-steam
2021-04-24 19:25:58 +02:00
Graham Christensen
d6ed686eb2
Add NixOS/Security as a reviewer for .github/workflows
2021-04-24 13:21:42 -04:00
Izorkin
47d3e955fc
nixos/mastodon/sandbox: add @privileged and @raw-io to SystemCallFilter
2021-04-24 19:12:10 +02:00
Graham Christensen
9d95ba3dd6
actions: add some permission restrictions
2021-04-24 13:07:57 -04:00
Fabian Affolter
e1054f07f1
home-assistant: enable smhi tests
2021-04-24 18:54:51 +02:00
Fabian Affolter
cee055528d
home-assistant: update component-packages
2021-04-24 18:54:23 +02:00
Fabian Affolter
019cf935eb
python3Packages.smhi-pkg: init at 1.0.14
2021-04-24 18:51:26 +02:00
Jonathan Ringer
69a4de6251
steamPackages.steam: use stable archive to avoid 404s
2021-04-24 09:48:44 -07:00
Jonathan Ringer
d79d927cca
steamPackages.steam: 1.0.0.69 -> 1.0.0.70
2021-04-24 09:37:38 -07:00
Martin Weinelt
b7e08de1e9
Merge pull request #119181 from SFrijters/wine-6.6
2021-04-24 17:59:07 +02:00
Martin Weinelt
192ae8f46a
Merge pull request #120474 from mweinelt/handlr
...
handlr: 0.5.0 -> 0.6.1
2021-04-24 17:54:08 +02:00
Martin Weinelt
9f48549762
Merge pull request #120532 from fabaff/homeconnect
2021-04-24 17:34:15 +02:00
John Ericson
d243aae0f3
Merge pull request #120470 from alyssais/doubles
...
lib.systems.doubles.netbsd: expand
2021-04-24 11:22:58 -04:00
Michele Guerini Rocco
a67aad9c01
Merge pull request #120522 from rnhmjoj/mkvtoolnix
...
mkvtoolnix: 55.0.0 -> 56.0.0
2021-04-24 17:16:32 +02:00
Symphorien Gibol
ddf567cd5a
nixos/nagios: use the correct option to restart on config change
...
X-ReloadIfChanged is incorrect, apparently https://github.com/NixOS/nixpkgs/pull/120324#discussion_r619472321
We restart instead of reloading because nagios unit file has no
ExecReload.
2021-04-24 17:12:51 +02:00
Mario Rodas
53a3fc2856
ocamlPackages.sedlex_2: 2.2 -> 2.3
2021-04-24 17:04:32 +02:00
Fabian Affolter
766e698739
home-assistant: enable home_connect tests
2021-04-24 16:54:13 +02:00
Fabian Affolter
2400327661
home-assistant: update component-packages
2021-04-24 16:54:13 +02:00
Fabian Affolter
c6e9a834b7
python3Packages.homeconnect: init at 0.6.3
2021-04-24 16:54:13 +02:00
Jan Tojnar
ac0319febf
Merge pull request #120231 from bobby285271/master
...
doc: Convert builders/images/* to markdown
2021-04-24 16:36:26 +02:00
Martin Weinelt
abd57b544e
Merge pull request #120276 from mweinelt/python/some-libs
2021-04-24 13:38:42 +02:00
José Romildo Malaquias
68e02d1757
Merge pull request #118367 from romildo/upd.mate_
...
mate: update packages
2021-04-24 08:03:19 -03:00
Michael Weiss
eb335f697e
chromium: Warn about and cleanup old chromiumVersionAtLeast conditionals
2021-04-24 12:47:12 +02:00
Sandro
e68638d6a0
Merge pull request #120437 from bachp/minio-2021-04-22T15-44-28Z
...
minio: 2021-04-06T23-11-00Z -> 2021-04-22T15-44-28Z
2021-04-24 12:43:28 +02:00
Sandro
8934a57c66
Merge pull request #120509 from rnhmjoj/pdns
...
pdns-recursor: 4.4.2 -> 4.4.3
2021-04-24 12:39:51 +02:00
rnhmjoj
60b30e4ef6
mkvtoolnix: 55.0.0 -> 56.0.0
2021-04-24 12:39:37 +02:00
Sandro
ec1fbe2241
Merge pull request #120465 from fabaff/bump-pymetno
...
python3Packages.pymetno: 0.8.2 -> 0.8.3
2021-04-24 12:38:07 +02:00
Luke Granger-Brown
080acfcc44
Merge pull request #115568 from r-ryantm/auto-update/sqlcipher
...
sqlcipher: 4.4.2 -> 4.4.3
2021-04-24 11:35:40 +01:00
Sandro
1341bcf1f8
Merge pull request #120496 from midchildan/fix/cryfs/darwin-binary-cache
...
cryfs: disable tests on Darwin
2021-04-24 12:33:48 +02:00
Sandro
d1bb63ed16
Merge pull request #120495 from fabaff/bump-angr
2021-04-24 12:33:30 +02:00
Luke Granger-Brown
57fd99043e
Merge pull request #120155 from LeSuisse/vault-0.7.1
...
vault: 1.7.0 -> 1.7.1
2021-04-24 11:32:08 +01:00
Michael Weiss
faf4d48554
Merge pull request #120506 from primeos/llvm
...
llvmPackages_12: Finalize reorganizing the files
2021-04-24 12:23:01 +02:00
