Commit graph

18 commits

Author SHA1 Message Date
Franz Pletz
aff1f4ab94 Use general hardening flag toggle lists
The following parameters are now available:

  * hardeningDisable
    To disable specific hardening flags
  * hardeningEnable
    To enable specific hardening flags

Only the cc-wrapper supports this right now, but these may be reused by
other wrappers, builders or setup hooks.

cc-wrapper supports the following flags:

  * fortify
  * stackprotector
  * pie (disabled by default)
  * pic
  * strictoverflow
  * format
  * relro
  * bindnow
2016-03-05 18:55:26 +01:00
Robin Gloster
3b4765c9e5 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-02-28 16:32:57 +00:00
Franz Pletz
158ff99ae4 chrony: 2.2 -> 2.3 2016-02-27 18:00:07 +01:00
Robin Gloster
62f65d15ca chrony: enable pie hardening 2016-02-26 17:54:46 +00:00
Franz Pletz
d89f269b26 chrony service: Members of group chrony can use chronyc 2015-11-03 15:07:18 +01:00
Franz Pletz
1a79058a81 chrony: Add fpletz to maintainers 2015-11-03 15:07:18 +01:00
Franz Pletz
596b06bd1c chrony: Build with NSS for secure hash support 2015-11-03 15:07:18 +01:00
Franz Pletz
a639e51760 chrony: 2.1.1 -> 2.2 2015-11-03 15:06:45 +01:00
Daniel Fox Franke
4f70094857 chrony: 1.31 -> 2.1.1 2015-08-08 11:07:12 -04:00
Rickard Nilsson
8dd1abe3fa chrony: Update from 1.30 to 1.31 2014-09-16 13:53:18 +02:00
Luca Bruno
0b038724c5 chrony: fails to build on darwin 2014-08-10 11:50:43 +02:00
Rickard Nilsson
c59a602465 chrony: Update from 1.29.1 to 1.30 2014-08-06 14:08:08 +02:00
Evgeny Egorochkin
6f57402bad chrony: update from 1.29 to 1.29.1 2014-03-08 18:27:30 +02:00
Evgeny Egorochkin
41333e1344 chrony; fix installation 2013-12-04 06:11:41 +02:00
Nixpkgs Monitor
1db5dd4ffb chrony: update from 1.27 to 1.29, potentially fixes CVE-2012-4502, CVE-2012-4503 2013-12-04 05:56:17 +02:00
Bjørn Forsman
28ac782583 Some description fixes
There are many more packages to fix, this is just a start.

Rules:
 * Don't repeat the package name (not always that easy...)
 * Start with capital letter
 * Don't end with full stop
 * Don't start with "The ..." or "A ..."

I've also added descriptions to some packages and rewritten others.
2013-10-05 19:36:23 +02:00
Ricardo M. Correia
200fd97b04 chrony: Add readline and libcap (on Linux) as dependencies
libcap is needed for chronyd to drop privileges when starting up.
readline was added as a convenience for when using chronyc.
2013-05-23 02:11:21 +00:00
Ricardo M. Correia
e28b51360d Add chrony.
Chrony is a pair of programs which are used to maintain the accuracy of the system clock on a computer.
2013-05-22 00:41:58 +02:00