Commit graph

314451 commits

Author SHA1 Message Date
rnhmjoj
65e83b0e23
nixos: fix nobody/nogroup in security.wrappers 2021-09-13 13:48:13 +02:00
rnhmjoj
fedd7cd690
nixos: explicitely set security.wrappers ownership
This is slightly more verbose and inconvenient, but it forces you
to think about what the wrapper ownership and permissions will be.
2021-09-13 13:48:13 +02:00
rnhmjoj
8f76a6eefc
nixos: add implict security.wrappers options
This is to keep the same permissions/setuid/setgid as before the change
in security.wrappers defaults.
2021-09-13 13:48:13 +02:00
rnhmjoj
41a498578e
nixos/mail: reuse security.wrappers type 2021-09-13 13:48:13 +02:00
rnhmjoj
27dcb04cde
nixos/security/wrappers: remove WRAPPER_PATH
This appears to be a leftover from 628e6a83.
2021-09-13 13:48:13 +02:00
rnhmjoj
936e8eaf41
nixos/security/wrappers: fix shell quoting 2021-09-13 13:48:12 +02:00
rnhmjoj
7d8b303e3f
nixos/security/wrappers: check that sources exist
Add a shell script that checks if the paths of all wrapped programs
actually exist to catch mistakes. This only checks for Nix store paths,
which are always expected to exist at build time.
2021-09-13 10:38:04 +02:00
rnhmjoj
22004f7e8f
nixos/security/wrappers: use fixed defaults
To keep backward compatibility and have a typing would require making
all options null by default, adding a defaultText containing the actual
value, write the default value logic based on `!= null` and replacing
the nulls laters. This pretty much defeats the point of having used
a submodule type.
2021-09-12 21:43:25 +02:00
rnhmjoj
904f68fb0f
nixos/security/wrappers: make well-typed
The security.wrappers option is morally a set of submodules but it's
actually (un)typed as a generic attribute set. This is bad for several
reasons:

1. Some of the "submodule" option are not document;
2. the default values are not documented and are chosen based on
   somewhat bizarre rules (issue #23217);
3. It's not possible to override an existing wrapper due to the
   dumb types.attrs.merge strategy;
4. It's easy to make mistakes that will go unnoticed, which is
   really bad given the sensitivity of this module (issue #47839).

This makes the option a proper set of submodule and add strict types and
descriptions to every sub-option. Considering it's not yet clear if the
way the default values are picked is intended, this reproduces the current
behavior, but it's now documented explicitly.
2021-09-12 21:43:03 +02:00
Sandro
c80b1155c9
Merge pull request #137528 from humancalico/hubble
hubble: init at 0.8.2
2021-09-12 16:14:50 +02:00
Sandro
d63f340344
Merge pull request #128669 from mikroskeem/quakespasm-darwin 2021-09-12 16:12:36 +02:00
Pavol Rusnak
a51701e3f3
android-backup-extractor: init at 20210909062443-4c55371 (#137516)
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2021-09-12 16:02:56 +02:00
Sandro
11909f7c3c
Merge pull request #137513 from r-ryantm/auto-update/python3.8-relatorio
python38Packages.relatorio: 0.9.3 -> 0.10.0
2021-09-12 16:02:10 +02:00
Sandro
da7fd2fdad
Merge pull request #137449 from mattchrist/init-stuntman
stuntman: init at 1.2.16
2021-09-12 16:01:37 +02:00
Michal Sojka
7f22c1851f
gnuplot: Allow compiling with libcaca (#137523)
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2021-09-12 16:00:55 +02:00
Phillip Cloud
b040385412
flynt: init at 0.66 (#137177)
Co-authored-by: Bobby Rong <rjl931189261@126.com>
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2021-09-12 16:00:19 +02:00
Zhong Jianxin
2b022a979a
zsh-fzf-tab: Support darwin platform (#137514)
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2021-09-12 15:58:48 +02:00
Sandro
4a56ed7a78
Merge pull request #137447 from mikroskeem/eduke32-macos 2021-09-12 15:58:08 +02:00
Sandro
ac63fe7c33
Merge pull request #137526 from SuperSandro2000/taskopen
taskopen: modernize
2021-09-12 15:57:39 +02:00
Mark Vainomaa
6ab2033765
quakespasm: 0.93.2 -> 0.94.1 2021-09-12 16:31:29 +03:00
Akshat Agarwal
688b9b65cb hubble: init at 0.8.2 2021-09-12 19:00:42 +05:30
Sandro Jäckel
d279bf9767
taskopen: modernize 2021-09-12 15:25:31 +02:00
Matt Christ
1d8bdf5389 stuntman: init at 1.2.16 2021-09-12 08:22:04 -05:00
Sandro
5da2746c8d
Merge pull request #134487 from r-ryantm/auto-update/quich 2021-09-12 15:15:11 +02:00
Sandro
6cdc71a06e
Merge pull request #137010 from jacobfoard/golangci-lint-1.42.1
golangci-lint: 1.42.0 -> 1.42.1
2021-09-12 15:14:11 +02:00
Sandro
0d40f713be
Merge pull request #137521 from SuperSandro2000/openems
openems: fix eval
2021-09-12 15:06:31 +02:00
Mario Rodas
93a56230db
Merge pull request #137477 from marsam/update-abseil
abseil-cpp: 20210324.1 -> 20210324.2
2021-09-12 07:52:24 -05:00
Mark Vainomaa
1dc56f1dc8
quakespasm: add SDL2 support; add Darwin support 2021-09-12 15:48:58 +03:00
Sandro
b432b2f337
Merge pull request #137510 from Ma27/bump-wiki-js
wiki-js: 2.5.201 -> 2.5.214
2021-09-12 14:47:46 +02:00
Sandro
b8470110ce
Merge pull request #137504 from fabaff/bump-mutf8 2021-09-12 14:47:19 +02:00
Sandro Jäckel
e4a49641ae
openems: fix eval 2021-09-12 14:45:44 +02:00
Pavol Rusnak
1998259887
Merge pull request #137519 from r-ryantm/auto-update/blocksat-cli
blocksat-cli: 0.3.2 -> 0.4.0
2021-09-12 14:41:21 +02:00
Sandro
3742afccd1
Merge pull request #137156 from r-ryantm/auto-update/python3.8-dropbox
python38Packages.dropbox: 11.18.0 -> 11.19.0
2021-09-12 14:38:30 +02:00
R. RyanTM
c551361531 blocksat-cli: 0.3.2 -> 0.4.0 2021-09-12 12:27:16 +00:00
Sandro
c8c30a2e0e
Merge pull request #137515 from NULLx76/unpackerr-0.9.8 2021-09-12 14:26:19 +02:00
Mark Vainomaa
acdec49e96
eduke32: 20210722 -> 20210910 2021-09-12 15:16:25 +03:00
Mark Vainomaa
8112bb92f9
eduke32: implement proper macOS support 2021-09-12 15:16:20 +03:00
Sandro
b3e803abf5
Merge pull request #137448 from tfmoraes/vtk_9.0.3
vtk_9: 9.0.1 -> 9.0.3
2021-09-12 14:16:17 +02:00
Sandro
cdcc4884c3
Merge pull request #137509 from sternenseemann/libvirt-hash
libvirt: fix tarball hash
2021-09-12 14:14:48 +02:00
Victor Roest
fd9a52c466
unpackerr: 0.9.7 -> 0.9.8 2021-09-12 13:12:56 +02:00
Sandro
e26b155274
Merge pull request #137444 from SuperSandro2000/wicd
treewide: yank wicd as it is abandoned
2021-09-12 12:56:10 +02:00
R. RyanTM
15fdbbe4e9 python38Packages.relatorio: 0.9.3 -> 0.10.0 2021-09-12 10:55:18 +00:00
markuskowa
b4114db313
Merge pull request #137133 from x3rAx/linux-router-0.6.2
linux-router: init at 0.6.2
2021-09-12 12:46:29 +02:00
Maximilian Bosch
f2175a917e
Merge pull request #135179 from r-ryantm/auto-update/taskopen
taskopen: 1.1.4 -> 1.1.5
2021-09-12 12:43:43 +02:00
Maximilian Bosch
75e56d5fb6
Merge pull request #135178 from r-ryantm/auto-update/sslmate
sslmate: 1.7.1 -> 1.8.0
2021-09-12 12:42:04 +02:00
Maximilian Bosch
13d9d33375
Merge pull request #135206 from feijoas/zfs_autobackup
zfs-autobackup: init at 3.1
2021-09-12 12:27:07 +02:00
sternenseemann
036c82cca1 libvirt: fix tarball hash
Fixes this failure: https://hydra.nixos.org/build/152776341

Unsure how this happened, but I verified the GPG signatures locally to
make sure the new hash is good.
2021-09-12 11:59:38 +02:00
Maximilian Bosch
75eaccdcbc
wiki-js: 2.5.201 -> 2.5.214
ChangeLog: https://github.com/Requarks/wiki/releases/tag/2.5.214
2021-09-12 11:52:17 +02:00
Michael Raskin
fe5b774b62
Merge pull request #137503 from Mic92/sysdig2
sysdig: fix linking against libabseil
2021-09-12 09:32:30 +00:00
Fabian Affolter
3d015c5845
Merge pull request #137436 from NilsIrl/mitmproxy_7.0.2
mitmproxy: 6.0.2 -> 7.0.2
2021-09-12 11:28:37 +02:00