rnhmjoj
65e83b0e23
nixos: fix nobody/nogroup in security.wrappers
2021-09-13 13:48:13 +02:00
rnhmjoj
fedd7cd690
nixos: explicitely set security.wrappers ownership
...
This is slightly more verbose and inconvenient, but it forces you
to think about what the wrapper ownership and permissions will be.
2021-09-13 13:48:13 +02:00
rnhmjoj
8f76a6eefc
nixos: add implict security.wrappers options
...
This is to keep the same permissions/setuid/setgid as before the change
in security.wrappers defaults.
2021-09-13 13:48:13 +02:00
rnhmjoj
41a498578e
nixos/mail: reuse security.wrappers type
2021-09-13 13:48:13 +02:00
rnhmjoj
27dcb04cde
nixos/security/wrappers: remove WRAPPER_PATH
...
This appears to be a leftover from 628e6a83
.
2021-09-13 13:48:13 +02:00
rnhmjoj
936e8eaf41
nixos/security/wrappers: fix shell quoting
2021-09-13 13:48:12 +02:00
rnhmjoj
7d8b303e3f
nixos/security/wrappers: check that sources exist
...
Add a shell script that checks if the paths of all wrapped programs
actually exist to catch mistakes. This only checks for Nix store paths,
which are always expected to exist at build time.
2021-09-13 10:38:04 +02:00
rnhmjoj
22004f7e8f
nixos/security/wrappers: use fixed defaults
...
To keep backward compatibility and have a typing would require making
all options null by default, adding a defaultText containing the actual
value, write the default value logic based on `!= null` and replacing
the nulls laters. This pretty much defeats the point of having used
a submodule type.
2021-09-12 21:43:25 +02:00
rnhmjoj
904f68fb0f
nixos/security/wrappers: make well-typed
...
The security.wrappers option is morally a set of submodules but it's
actually (un)typed as a generic attribute set. This is bad for several
reasons:
1. Some of the "submodule" option are not document;
2. the default values are not documented and are chosen based on
somewhat bizarre rules (issue #23217 );
3. It's not possible to override an existing wrapper due to the
dumb types.attrs.merge strategy;
4. It's easy to make mistakes that will go unnoticed, which is
really bad given the sensitivity of this module (issue #47839 ).
This makes the option a proper set of submodule and add strict types and
descriptions to every sub-option. Considering it's not yet clear if the
way the default values are picked is intended, this reproduces the current
behavior, but it's now documented explicitly.
2021-09-12 21:43:03 +02:00
Sandro
c80b1155c9
Merge pull request #137528 from humancalico/hubble
...
hubble: init at 0.8.2
2021-09-12 16:14:50 +02:00
Sandro
d63f340344
Merge pull request #128669 from mikroskeem/quakespasm-darwin
2021-09-12 16:12:36 +02:00
Pavol Rusnak
a51701e3f3
android-backup-extractor: init at 20210909062443-4c55371 ( #137516 )
...
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2021-09-12 16:02:56 +02:00
Sandro
11909f7c3c
Merge pull request #137513 from r-ryantm/auto-update/python3.8-relatorio
...
python38Packages.relatorio: 0.9.3 -> 0.10.0
2021-09-12 16:02:10 +02:00
Sandro
da7fd2fdad
Merge pull request #137449 from mattchrist/init-stuntman
...
stuntman: init at 1.2.16
2021-09-12 16:01:37 +02:00
Michal Sojka
7f22c1851f
gnuplot: Allow compiling with libcaca ( #137523 )
...
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2021-09-12 16:00:55 +02:00
Phillip Cloud
b040385412
flynt: init at 0.66 ( #137177 )
...
Co-authored-by: Bobby Rong <rjl931189261@126.com>
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2021-09-12 16:00:19 +02:00
Zhong Jianxin
2b022a979a
zsh-fzf-tab: Support darwin platform ( #137514 )
...
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2021-09-12 15:58:48 +02:00
Sandro
4a56ed7a78
Merge pull request #137447 from mikroskeem/eduke32-macos
2021-09-12 15:58:08 +02:00
Sandro
ac63fe7c33
Merge pull request #137526 from SuperSandro2000/taskopen
...
taskopen: modernize
2021-09-12 15:57:39 +02:00
Mark Vainomaa
6ab2033765
quakespasm: 0.93.2 -> 0.94.1
2021-09-12 16:31:29 +03:00
Akshat Agarwal
688b9b65cb
hubble: init at 0.8.2
2021-09-12 19:00:42 +05:30
Sandro Jäckel
d279bf9767
taskopen: modernize
2021-09-12 15:25:31 +02:00
Matt Christ
1d8bdf5389
stuntman: init at 1.2.16
2021-09-12 08:22:04 -05:00
Sandro
5da2746c8d
Merge pull request #134487 from r-ryantm/auto-update/quich
2021-09-12 15:15:11 +02:00
Sandro
6cdc71a06e
Merge pull request #137010 from jacobfoard/golangci-lint-1.42.1
...
golangci-lint: 1.42.0 -> 1.42.1
2021-09-12 15:14:11 +02:00
Sandro
0d40f713be
Merge pull request #137521 from SuperSandro2000/openems
...
openems: fix eval
2021-09-12 15:06:31 +02:00
Mario Rodas
93a56230db
Merge pull request #137477 from marsam/update-abseil
...
abseil-cpp: 20210324.1 -> 20210324.2
2021-09-12 07:52:24 -05:00
Mark Vainomaa
1dc56f1dc8
quakespasm: add SDL2 support; add Darwin support
2021-09-12 15:48:58 +03:00
Sandro
b432b2f337
Merge pull request #137510 from Ma27/bump-wiki-js
...
wiki-js: 2.5.201 -> 2.5.214
2021-09-12 14:47:46 +02:00
Sandro
b8470110ce
Merge pull request #137504 from fabaff/bump-mutf8
2021-09-12 14:47:19 +02:00
Sandro Jäckel
e4a49641ae
openems: fix eval
2021-09-12 14:45:44 +02:00
Pavol Rusnak
1998259887
Merge pull request #137519 from r-ryantm/auto-update/blocksat-cli
...
blocksat-cli: 0.3.2 -> 0.4.0
2021-09-12 14:41:21 +02:00
Sandro
3742afccd1
Merge pull request #137156 from r-ryantm/auto-update/python3.8-dropbox
...
python38Packages.dropbox: 11.18.0 -> 11.19.0
2021-09-12 14:38:30 +02:00
R. RyanTM
c551361531
blocksat-cli: 0.3.2 -> 0.4.0
2021-09-12 12:27:16 +00:00
Sandro
c8c30a2e0e
Merge pull request #137515 from NULLx76/unpackerr-0.9.8
2021-09-12 14:26:19 +02:00
Mark Vainomaa
acdec49e96
eduke32: 20210722 -> 20210910
2021-09-12 15:16:25 +03:00
Mark Vainomaa
8112bb92f9
eduke32: implement proper macOS support
2021-09-12 15:16:20 +03:00
Sandro
b3e803abf5
Merge pull request #137448 from tfmoraes/vtk_9.0.3
...
vtk_9: 9.0.1 -> 9.0.3
2021-09-12 14:16:17 +02:00
Sandro
cdcc4884c3
Merge pull request #137509 from sternenseemann/libvirt-hash
...
libvirt: fix tarball hash
2021-09-12 14:14:48 +02:00
Victor Roest
fd9a52c466
unpackerr: 0.9.7 -> 0.9.8
2021-09-12 13:12:56 +02:00
Sandro
e26b155274
Merge pull request #137444 from SuperSandro2000/wicd
...
treewide: yank wicd as it is abandoned
2021-09-12 12:56:10 +02:00
R. RyanTM
15fdbbe4e9
python38Packages.relatorio: 0.9.3 -> 0.10.0
2021-09-12 10:55:18 +00:00
markuskowa
b4114db313
Merge pull request #137133 from x3rAx/linux-router-0.6.2
...
linux-router: init at 0.6.2
2021-09-12 12:46:29 +02:00
Maximilian Bosch
f2175a917e
Merge pull request #135179 from r-ryantm/auto-update/taskopen
...
taskopen: 1.1.4 -> 1.1.5
2021-09-12 12:43:43 +02:00
Maximilian Bosch
75e56d5fb6
Merge pull request #135178 from r-ryantm/auto-update/sslmate
...
sslmate: 1.7.1 -> 1.8.0
2021-09-12 12:42:04 +02:00
Maximilian Bosch
13d9d33375
Merge pull request #135206 from feijoas/zfs_autobackup
...
zfs-autobackup: init at 3.1
2021-09-12 12:27:07 +02:00
sternenseemann
036c82cca1
libvirt: fix tarball hash
...
Fixes this failure: https://hydra.nixos.org/build/152776341
Unsure how this happened, but I verified the GPG signatures locally to
make sure the new hash is good.
2021-09-12 11:59:38 +02:00
Maximilian Bosch
75eaccdcbc
wiki-js: 2.5.201 -> 2.5.214
...
ChangeLog: https://github.com/Requarks/wiki/releases/tag/2.5.214
2021-09-12 11:52:17 +02:00
Michael Raskin
fe5b774b62
Merge pull request #137503 from Mic92/sysdig2
...
sysdig: fix linking against libabseil
2021-09-12 09:32:30 +00:00
Fabian Affolter
3d015c5845
Merge pull request #137436 from NilsIrl/mitmproxy_7.0.2
...
mitmproxy: 6.0.2 -> 7.0.2
2021-09-12 11:28:37 +02:00