Commit graph

165609 commits

Author SHA1 Message Date
Will Dietz
5adde64416 minizincide: minor touchups per reviewer suggestion
(sourceRoot needed a "source/" prefix, FWIW)
2019-01-05 13:35:10 -06:00
Ryan Mulligan
d637039acf
Merge pull request #53432 from jerith666/haskell-fixes
haskell: friday: jailbreak
2019-01-05 10:48:48 -08:00
Ryan Mulligan
f706777f5b haskellPackages.binary-orphans: dontCheck 2019-01-05 10:29:20 -08:00
Ryan Mulligan
e5512a158c
Merge pull request #53159 from ryantm/haskell-github
haskellPackages.github: dontCheck
2019-01-05 10:25:08 -08:00
Ryan Mulligan
88029fc8af
Merge branch 'master' into haskell-github 2019-01-05 10:02:30 -08:00
Tadeo Kondrak
0d99389a6d wine: add perl to buildInputs to fix winemaker 2019-01-05 18:40:59 +01:00
Jörg Thalheim
09fb07e4af
Merge pull request #52943 from ck3d/vdr-enableLirc
nixos vdr: introduce option enableLirc
2019-01-05 17:51:41 +01:00
Dmitry Kalinkin
8a7d9e6dd0 offlineimap: provide "OS-DEFAULT" CA certificates (#53268) 2019-01-05 17:38:10 +01:00
xeji
361d64de02
Merge pull request #53398 from Mic92/cryptominisat
cryptominisat: 5.0.1 -> 5.6.6
2019-01-05 17:34:50 +01:00
Jörg Thalheim
e2b79b10b5
afl: various cleanups 2019-01-05 17:22:24 +01:00
Jörg Thalheim
5da3d039d4
qemu-afl: various cleanups 2019-01-05 17:22:06 +01:00
Jörg Thalheim
8a2389e4a1
Merge pull request #53404 from Mic92/xsslock
nixos/xss-lock: specify a default locker
2019-01-05 16:44:29 +01:00
Jörg Thalheim
2614c8a6c5
nixos/xss-lock: specify a default locker
Having a default locker is less error-prone and more convenient.
Incorrect values might leave the machine vulnerable since there is no
fallback.
2019-01-05 16:42:30 +01:00
Jörg Thalheim
37fe593d48
cryptominisat: switch to python3 2019-01-05 16:38:10 +01:00
Vladimír Čunát
d84a33d85b
Merge branch 'master' into staging-next
A few more rebuilds (~1k on x86_64-linux).
2019-01-05 15:02:04 +01:00
R. RyanTM
df834ee56d sysstat: 12.1.1 -> 12.1.2 (#52675)
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/sysstat/versions
2019-01-05 14:47:25 +01:00
Matt McHenry
8358ffc708 haskellPackages.friday: jailbreak 2019-01-05 08:39:09 -05:00
Domen Kožar
5ec91bac2f
Merge pull request #53326 from domenkozar/elm-packaging-rehaul
Elm: automate packaging with elm2nix
2019-01-05 13:20:16 +00:00
Joachim Fasting
167578163a
nixos/hardened profile: always enable pti 2019-01-05 14:07:39 +01:00
Joachim Fasting
3f1f443125
nixos/hardened profile: slab/slub hardening
slab_nomerge may reduce surface somewhat

slub_debug is used to enable additional sanity checks and "red zones" around
allocations to detect read/writes beyond the allocated area, as well as
poisoning to overwrite free'd data.

The cost is yet more memory fragmentation ...
2019-01-05 14:07:37 +01:00
Joachim Fasting
d62086e6fc
hardened-config: allow slub/slab free poisoning 2019-01-05 14:07:36 +01:00
Joachim Fasting
11840f5c70
hardened-config: explain HARDENED_USERCOPY_FALLBACK n 2019-01-05 14:07:36 +01:00
Joachim Fasting
dfd77a046d
hardened-config: ensure STRICT_KERNEL_RWX
This is y in the default config, but enable it explicitly here to catch
situations where it has been disabled (explicitly or implicitly).
2019-01-05 14:07:35 +01:00
Joachim Fasting
1801aad7b8
hardened-config: clarify MODIFY_LDT_SYSCALL
This likely never worked; MODIFY_LDT_SYSCALL depends on EXPERT; enabling
EXPERT however seems to introduce quite a few changes that would need to be
properly vetted.

The version guard is unnecessary, however, as this config has been supported
since 4.3.
2019-01-05 14:07:34 +01:00
Joachim Fasting
abc8ed3fca
hardened-config: clarify readonly LSM hooks config
SECURITY_WRITABLE_HOOKS is implicitly controlled by SECURITY_SELINUX_DISABLE;
explicitly unsetting results in an error because the configfile builder fails
to detect that it has in fact been unset (reporting it as an unused option).
For now, leave WRITABLE_HOOKS as an "optional" config for documentation
purposes.
2019-01-05 14:07:33 +01:00
Joachim Fasting
c68e8b05f0
Revert "linux-hardened: Disable GCC_PLUGIN_RANDSTRUCT"
This reverts commit 5dda1324be.

Presumably this was done to work around build errors or something but it
works fine now.
2019-01-05 14:07:21 +01:00
Jörg Thalheim
e36c93b3a0
Merge pull request #53408 from frlan/Update/Geany/1.34.1
Geany: 1.34 -> 1.34.1
2019-01-05 13:24:38 +01:00
Jörg Thalheim
9b2f0fbcdd
nixos/lirc: expose socket path via passthru 2019-01-05 13:22:39 +01:00
Michael Raskin
3b152247ea weechatScripts.weechat-matrix-bridge: 2018-05-29 -> 2018-11-19 (HTTP/2 support fix) 2019-01-05 13:21:30 +01:00
taku0
17f4d415a2
thunderbird: 60.3.3 -> 60.4.0
Picked from PR #53437.  It runs fine for me.
2019-01-05 13:09:04 +01:00
Jörg Thalheim
8e95adcb75
Merge pull request #53439 from dywedir/gpxsee
gpxsee: 6.3 -> 7.1
2019-01-05 13:08:27 +01:00
Jörg Thalheim
38fa1ed0db
Merge pull request #53392 from xzfc/xpointerbarrier
xpointerbarrier: 17.11 -> 18.06
2019-01-05 13:03:53 +01:00
Jörg Thalheim
8832292ace
Merge pull request #52932 from ejpcmac/init-elixir_1_8
elixir_1_8: init at 1.8.0-rc.1
2019-01-05 12:59:33 +01:00
Jörg Thalheim
bf6aa78d0d
Merge pull request #52951 from Gerschtli/update/pdf2image
pythonPackages.pdf2image: 1.0.0 -> 1.3.1
2019-01-05 12:56:47 +01:00
Michael Raskin
fbd6ddadf1
Merge pull request #53434 from tohl/master
sbcl updated, tested on nixos x86_64
2019-01-05 11:48:23 +00:00
Jörg Thalheim
4a4d1d6497
cryptominisat: 5.0.1 -> 5.6.6 2019-01-05 12:45:44 +01:00
Jörg Thalheim
69d3eb6b6f
elixir: link to compatibility table 2019-01-05 12:39:23 +01:00
Jean-Philippe Cugnet
5cefef0d12
elixir_1_3: Remove since it is not supported anymore 2019-01-05 12:34:49 +01:00
Orivej Desh
8dddd6d4a1 clang-tools: override llvm version in all-packages 2019-01-05 11:19:37 +00:00
Tobias Happ
f94016eb84 pythonPackages.pdf2image: 1.0.0 -> 1.3.1 2019-01-05 10:56:50 +01:00
Vladyslav Mykhailichenko
f24d62c1e9
gpxsee: 6.3 -> 7.1 2019-01-05 11:44:07 +02:00
Samuel Dionne-Riel
c620278b63
Merge pull request #53435 from worldofpeace/systemd-logo
nixos/version: add LOGO to /etc/os-release
2019-01-05 00:30:21 -05:00
Matthew Bauer
d9707792b5 mesa: make sure $drivers output gets created
Not all installs will have a $drivers output, so we just create an
empty one here.
2019-01-04 23:26:57 -06:00
worldofpeace
21327795ce nixos/version: add LOGO to /etc/os-release 2019-01-05 00:03:39 -05:00
Tomas Hlavaty
2d9d6337f8 sbcl: 1.4.13 -> 1.4.15 2019-01-05 05:19:42 +01:00
John Ericson
1383670a83
Merge pull request #53029 from Ericson2314/windows-ce-arm
lib: Fix Mingw on 32-bit ARM
2019-01-04 20:27:35 -05:00
Michael Weiss
e7e18206dd
fuse: 2.9.8 -> 2.9.9 2019-01-05 02:26:02 +01:00
Dmitry Kalinkin
fb185ff859
Merge pull request #52835 from suhr/musescore
musescore: 2.3.2 -> 3.0
2019-01-04 20:20:34 -05:00
worldofpeace
678dda92a5 libcdr: drop boost159 compat fix 2019-01-04 19:49:05 -05:00
worldofpeace
2764297cc5 libcdr: disable werror is default
So this optional configure flag is uneeded.

See: 10211e95bb/NEWS (L5)
2019-01-04 19:49:05 -05:00