Commit graph

114049 commits

Author SHA1 Message Date
Orivej Desh
d70006c6d9 mkDerivation: fix hardening flags check
- allow "all" in hardeningDisable
- fix busybox flags
- print detailed error message

Discussed at https://github.com/NixOS/nixpkgs/pull/28555#issuecomment-326413032
2017-09-01 01:01:24 +00:00
John Ericson
46d6fecf78 Merge pull request #28770 from obsidiansystems/remove-wrapper-hooks
cc-wrapper: Remove deprecated parameters
2017-08-31 20:03:57 -04:00
John Ericson
29c4294f85 Merge pull request #28798 from obsidiansystems/darwin-no-nativeTools
darwin-stdenv: Don't use `nativeTools`
2017-08-31 19:33:27 -04:00
John Ericson
8dbdc5dd51 darwin-stdenv: Hack around impurity with --disable configure flag 2017-08-31 18:08:05 -04:00
John Ericson
3d3a6e0fac cc-wrapper: Remove support for NIX_LDFLAGS_HARDEN
It has long been deprecated
2017-08-31 13:54:32 -04:00
John Ericson
46fd4bcb14 cc-wrapper: Remove {START,EXEC}_HOOK
These are no longer used by anything
2017-08-31 13:54:07 -04:00
John Ericson
3b6e7fe123 darwin-stdenv: Don't use nativeTools
Now, we'll actually use the wrapped ld to link
2017-08-31 12:37:48 -04:00
Lancelot SIX
095af3e63b libgcrypt: 1.8.0 -> 1.8.1
Fixes CVE-2017-0379

See http://lists.gnu.org/archive/html/info-gnu/2017-08/msg00014.html
for release announcement
2017-08-31 16:38:02 +02:00
Daniel Peebles
8c09e207ef Merge pull request #28767 from LnL7/darwin-cleanup
darwin attribute cleanup
2017-08-30 18:09:05 -04:00
Daiderd Jordan
3979f48f7f
darwin: add callPackage 2017-08-30 23:45:56 +02:00
Daiderd Jordan
c4f18901b4
darwin: move definition to separate file 2017-08-30 23:45:49 +02:00
John Ericson
22cd889a28 Merge pull request #28766 from obsidiansystems/gettext
gettext: libiconv should be a buildInput
2017-08-30 17:11:35 -04:00
John Ericson
2cc7f1a731 gettext: libiconv should be a buildInput 2017-08-30 16:49:52 -04:00
teh
3e50f0ae0e systemd: add patch to fix suspend.target 2017-08-30 21:22:58 +02:00
Matthew Robbetts
e82cb3dfa4 openldap: Fix build with LibreSSL. 2017-08-30 19:39:11 +02:00
John Ericson
97a48835b7 mkDerivation, cc-wrapper: Check hardening flag validity in Nix
This becomes necessary if more wrappers besides cc-wrapper start
supporting hardening flags. Also good to make the warning into an
error.

Also ensure interface is being used right: Not as a string, not just in
bash.
2017-08-30 17:53:42 +02:00
John Ericson
822a8d0148 cc-wrapper: Remove redundant hardening
GCC just passes `-z ...` flags to ld unaltered, and they are already
passed to LD anyways. On the other hand, `-pie` affects gcc behavior
too.
2017-08-30 17:53:42 +02:00
Jörg Thalheim
823fb278d3 Merge pull request #28226 from casey/ncurses-tic
ncurses: put tic binary in bin
2017-08-30 14:19:44 +01:00
Franz Pletz
06f9f9323c Merge pull request #28683 from jtojnar/fix-gnome-disk-utility
gnome-disk-utility: fix missing schemas for gnome-disk-image-mounter
2017-08-30 01:54:33 +02:00
Daiderd Jordan
adca58c2e7 Merge pull request #27598 from LnL7/darwin-cf-rpath
CoreFoundation: use rpath to fix issues when using frameworks
2017-08-29 22:16:56 +02:00
Vladimír Čunát
8f713e881e
wyrd: fixup by using older ncurses 2017-08-29 22:06:07 +02:00
WilliButz
95a4c03c7d inkscape: 0.92.1 -> 0.92.2 2017-08-29 16:45:20 +02:00
WilliButz
a72ba661ac netcat-openbsd: 1.105 -> 1.130 2017-08-29 16:45:20 +02:00
WilliButz
164eb72403 nasm: 2.12.02 -> 2.13.01 2017-08-29 16:45:20 +02:00
WilliButz
936fee257d freeradius: 3.0.14 -> 3.0.15 2017-08-29 16:45:20 +02:00
WilliButz
5b36d3993f highlight: 3.35 -> 3.39 2017-08-29 16:45:20 +02:00
Vladimír Čunát
dc93744273
rogue: omit from the installation media
At least for now.  It would increase the ISO size by ~10 MB,
after the fixup in the parent commit.
2017-08-29 16:15:15 +02:00
Vladimír Čunát
cdb49582a6
rogue: fix build by using older ncurses 2017-08-29 16:14:47 +02:00
José Romildo Malaquias
fe6c5adecf
e17gtk: finish decoupling from gnome3 version 2017-08-29 14:24:17 +02:00
Jan Tojnar
b64f149ea9
gnome-disk-utility: fix missing schemas for gnome-disk-image-mounter
Continuation of #28053

gnome-disk-image-mounter from gnome-disk-utility was not wrapped, resulting in an
error due to the inability to find gsettings schemas.

This commit replaces the manual wrapping of gnome-disks binary with wrapGAppsHook
so that all binaries are wrapped correctly.
2017-08-29 13:29:04 +02:00
Vladimír Čunát
2858c41823
Merge branch 'master' into staging
There were some conflicts in python modules, commented at #28314.
2017-08-29 10:51:54 +02:00
Vladimír Čunát
34b6bbe021
Merge #28053: GNOME: 3.22 -> 3.24 2017-08-29 09:48:54 +02:00
Vladimír Čunát
6e0f61486a
e17gtk: unbreak evaluation after gnome update 2017-08-29 09:48:13 +02:00
Jörg Thalheim
e1f755e44f Merge pull request #28668 from AndersonTorres/upload-mednafen
Mednafen: 0.9.38.7 -> 0.9.47
2017-08-29 08:13:49 +01:00
Jörg Thalheim
96ef0dc776 python.pkgs.mozlog: disable for python3
not yet compatible according to upstream
2017-08-29 06:49:03 +01:00
Jörg Thalheim
18036996a5 Merge pull request #28664 from NeQuissimus/ply_folder_kernel
ply: Allow building for git-fetched kernels
2017-08-29 06:39:42 +01:00
AndersonTorres
026bc4f783 Mednafen: 0.9.38.7 -> 0.9.47
And some minor changes
2017-08-29 00:10:20 -03:00
AndersonTorres
18df335c17 Mednafen-server: change download location
And some minor modifications
2017-08-29 00:05:55 -03:00
Dan Peebles
d25134b196 pythonPackages.tiros: init at 1.0.38 2017-08-28 22:11:44 -04:00
Michael Weiss
ea23f8bb07 cups service: Automatically detect Gutenprint in drivers
Additional CUPS drivers can be added via "services.printing.drivers" but
Gutenprint was an exception. It was possible to add a Gutenprint
derivation to that list and it would work at first but unlike the other
drivers Gutenprint requires a script to be run after each update or any
attempt to print something would simply fail and an error would show up
in the jobs queue (http://localhost:631/jobs/):
"The PPD version (5.2.11) is not compatible with Gutenprint 5.2.13.
Please run
`/nix/store/7762kpyhfkcgmr3q81v1bbyy0bjhym80-gutenprint-5.2.13/sbin/cups-genppdupdate'
as administrator."
This is due to state in "/var/lib/cups/ppd" and one would need to run
"/nix/store/.../bin/cups-genppdupdate -p /var/lib/cups/ppd" manually.
The alternative was to enable the following option:
"services.printing.gutenprint" but this had two disadvantages:
1) It is an exception that one could be unaware of or that could
potentially cause some confusion.
2) One couldn't use a customized Gutenprint derivation in
"services.printing.drivers" but would instead have to overwrite
"pkgs.gutenprint".

This new approach simply detects a Gutenprint derivation in
"services.printing.gutenprint" by checking if the meta set of a
derivation contains "isGutenprint = true". Therefore no special
exception for Gutenprint would be required and it could easily be
applied to other drivers if they would require such a script to be run.
2017-08-29 05:25:12 +04:00
Cray Elliott
ecea06ab2e wine-mono: 4.7.0 -> 4.7.1 2017-08-28 18:02:05 -07:00
Tim Steinbach
56beae4db6
ply: Allow building for git-fetched kernels 2017-08-28 20:12:17 -04:00
John Ericson
5790ae3ce0 Merge pull request #28646 from obsidiansystems/apple-native-build-inputs
apple misc pkgs: `buildInputs` -> `nativeBuildInputs`
2017-08-28 20:06:31 -04:00
Tuomas Tynkkynen
ff3f6f38c4 linux_rpi: 1.20170515 -> 1.20170811 2017-08-29 02:37:52 +03:00
Tuomas Tynkkynen
b1749aecbe raspberrypifw: 1.20170515 -> 1.20170515n 2017-08-29 02:37:38 +03:00
Franz Pletz
8e622d2689
phpfpm service: allow netlink sockets for sendmail
Fixes #26611.
2017-08-29 00:41:31 +02:00
Robin Gloster
8d6682ca0b
snake4: don't install with setuid
what the..
2017-08-29 00:34:33 +02:00
Robin Gloster
fdc18bc74c
uri: 2016-09-04 -> 2017-07-16 2017-08-29 00:01:11 +02:00
Daiderd Jordan
5a28fd660a
darwin-frameworks: move fixup setup-hook 2017-08-28 23:25:11 +02:00
Daiderd Jordan
cc1bfbd9a7
darwin-frameworks: use the system CF when frameworks are used
This will get propagated down to other libraries loaded because
everything in nixpkgs references CF based on an rpath entry.
2017-08-28 23:25:09 +02:00