Commit graph

12614 commits

Author SHA1 Message Date
Roosembert Palacios 831c700c5d
firejail: fix -overlay and -build functionality on NixOS
- The `-overlay` flag runs the specified binary inside an OverlayFS,
  since the /nix store may be in a different mount point than the user
  home, this patch explicitly bind mounts it so it's available inside
  the overlay.

- profile builder: firejail provides facilities to build a new profiles.
  To do so, it execute the helper binary `fbuilder`, which in turn will
  execute firejail back with different options. This patch makes it use
  the binary available in PATH instead of the one produced at compile time.
  The compiled firejail binary doesn't have the necessary permissions,
  so the firejail NixOS module wraps it in a SUID wrapper available on
  PATH at runtime.

Signed-off-by: Roosembert Palacios <roosemberth@posteo.ch>
2020-11-27 23:14:58 +01:00
Linus Heckemann 9174f79fe6
Merge pull request #104760 from gravndal/edac
linux: explicitly enable RAS
2020-11-27 19:15:00 +01:00
Maximilian Bosch b19ad349b0
Merge pull request #104792 from SuperSandro2000/autofs-fix
autofs: fix compilation fail due to libtirpc changes
2020-11-27 19:09:41 +01:00
Sandro be36f6f0a0
Merge pull request #100891 from lukebfox/patch-2
powertop: strip hcitool FSH path
2020-11-27 14:50:30 +01:00
Sandro 1ec96b7d1f
Merge pull request #105011 from r-ryantm/auto-update/light
light: 1.2.1 -> 1.2.2
2020-11-26 12:28:15 +01:00
R. RyanTM 0722158dba light: 1.2.1 -> 1.2.2 2020-11-26 10:20:17 +00:00
Gaute Ravndal 5183864d18 linux: explicitly enable RAS
This is needed for EDAC support.
2020-11-26 10:08:51 +01:00
Dmitry Kalinkin 731c548629
Merge pull request #104373 from andresilva/linux-zen-5.9.9
linux_zen: 5.9.6 -> 5.9.10
2020-11-24 21:43:57 -05:00
Florian Klink b92942f466 systemd: use withPortabled in mesonFlags
No matter what withPortabled was being set, we always passed
-Dportabled=false in mesonFlags. Fix this.

Also, nixpkgs-fmt the file for consistency.
2020-11-25 00:22:37 +01:00
Sandro 77d45b8609
Merge pull request #99426 from jonringer/add-catfs
catfs: init at unstable-2020-03-21
2020-11-24 23:40:19 +01:00
Graham Christensen d9c3f13df3
Merge pull request #104776 from grahamc/utillinux
utillinux: rename to util-linux
2020-11-24 15:14:36 -05:00
Sandro Jäckel 2044fa172d
sssd: fix nss collision with upstream patch 2020-11-24 20:09:04 +01:00
Sandro Jäckel 4d5ab8d9f7
autofs: fix compilation fail due to libtirpc changes 2020-11-24 19:53:20 +01:00
Sandro 43082f7f19
Merge pull request #104774 from grahamc/sssd
sssd: fix build on glibc-2.32
2020-11-24 19:53:06 +01:00
Graham Christensen bc49a0815a
utillinux: rename to util-linux 2020-11-24 12:42:06 -05:00
Tim Steinbach 874e250009
linux-rt_5_4: 5.4.77-rt43 -> 5.4.78-rt44 2020-11-24 10:04:24 -05:00
Tim Steinbach 513afc731c
linux: 5.9.10 -> 5.9.11 2020-11-24 10:04:24 -05:00
Tim Steinbach 53738d417f
linux: 5.4.79 -> 5.4.80 2020-11-24 10:04:23 -05:00
Tim Steinbach a17655a291
linux: 4.9.245 -> 4.9.246 2020-11-24 10:04:23 -05:00
Tim Steinbach d17c554fdf
linux: 4.4.245 -> 4.4.246 2020-11-24 10:04:22 -05:00
Tim Steinbach 06ba11d0b7
linux: 4.19.159 -> 4.19.160 2020-11-24 10:04:21 -05:00
Tim Steinbach c384c5409a
linux: 4.14.208 -> 4.14.209 2020-11-24 10:04:18 -05:00
Graham Christensen 22965d84d5
sssd: fix build on glibc-2.32
For https://hydra.nixos.org/build/128488320 which errored with:

    src/responder/nss/nss_cmd.c:733:16: error: 'nss_setnetgrent' redeclared as different kind of symbol
      733 | static errno_t nss_setnetgrent(struct cli_ctx *cli_ctx,
          |                ^~~~~~~~~~~~~~~
    In file included from ./src/sss_client/sss_cli.h:28,
                     from ./src/db/sysdb.h:27,
                     from src/responder/nss/nss_cmd.c:26:
    /nix/store/a2n8nrsf215x01a7fv8l94crdjwf69pa-glibc-2.32-dev/include/nss.h:184:25: note: previous declaration of 'nss_setnetgrent' was here
      184 | typedef enum nss_status nss_setnetgrent (const char *, struct __netgrent *);
          |                         ^~~~~~~~~~~~~~~
    make[2]: *** [Makefile:17818: src/responder/nss/nss_cmd.o] Error 1
    make[2]: Leaving directory '/build/sssd-1.16.4'
    make[1]: *** [Makefile:33824: all-recursive] Error 1
    make[1]: Leaving directory '/build/sssd-1.16.4'
    make: *** [Makefile:10123: all] Error 2
2020-11-24 09:50:33 -05:00
Dmitry Kalinkin 7d9c1b2dca
Merge pull request #86834 from eadwu/nvidia_x11/fix-vulkan-icd
nvidia_x11: fix vulkan icd filename
2020-11-24 08:02:39 -05:00
Ryan Mulligan 8d12c667ff
Merge pull request #93176 from oxalica/init/swapview
swapview: init at 0.1.0
2020-11-23 11:24:59 -08:00
Ryan Mulligan 0b84f3b469
Merge pull request #100549 from oxalica/bump/earlyoom
earlyoom: 1.6.1 -> 1.6.2
2020-11-23 11:05:00 -08:00
Tim Steinbach d0225fcdae
linux: 5.10-rc4 -> 5.10-rc5 2020-11-23 11:31:45 -05:00
Tim Steinbach fa6abb2b61
linux/hardened/patches/5.9: 5.9.9.a -> 5.9.10.a 2020-11-23 10:55:16 -05:00
Tim Steinbach 640a842d57
linux/hardened/patches/5.4: 5.4.78.a -> 5.4.79.a 2020-11-23 10:55:15 -05:00
Tim Steinbach dd721fc7b0
linux/hardened/patches/4.19: 4.19.158.a -> 4.19.159.a 2020-11-23 10:55:15 -05:00
Tim Steinbach 62531fd4e2
linux/hardened/patches/4.14: 4.14.207.a -> 4.14.208.a 2020-11-23 10:55:15 -05:00
Tim Steinbach ca4d1602d7
linux: 5.9.9 -> 5.9.10 2020-11-23 10:55:14 -05:00
Tim Steinbach 716283fa3a
linux: 5.4.78 -> 5.4.79 2020-11-23 10:55:14 -05:00
Tim Steinbach 856d7ae12b
linux: 4.9.244 -> 4.9.245 2020-11-23 10:55:13 -05:00
Tim Steinbach 5ba51e7343
linux: 4.4.244 -> 4.4.245 2020-11-23 10:55:13 -05:00
Tim Steinbach 187e3bfa48
linux: 4.19.158 -> 4.19.159 2020-11-23 10:55:12 -05:00
Tim Steinbach 5cfb696a1a
linux: 4.14.207 -> 4.14.208 2020-11-23 10:55:12 -05:00
André Silva 34fb8f746e
linux_zen: 5.9.6 -> 5.9.10 2020-11-22 17:01:53 +00:00
Michael Raskin d006ea0663
Merge pull request #104487 from snicket2100/firejail-xdg-dbus-proxy
firejail: fixing the 'xdg-dbus-proxy' dependency
2020-11-22 16:32:19 +00:00
snicket2100 ffeb2af920 firejail: fixing the 'xdg-dbus-proxy' dependency
xdg-dbus-proxy path is hardcoded in the common.h file in the firejail
source code. if this binary is not found, dbus filtering capabilities
of firejail get limited i.e. you can only entirely disable or entirely
enable dbus communication.
2020-11-22 13:35:09 +01:00
Frederik Rietdijk 1ffd7cf0d6 Merge master into staging-next 2020-11-21 08:43:10 +01:00
Christian Kampka ecaa0e1058 s6-linux-utils: 2.5.1.2 -> 2.5.1.3 2020-11-20 18:15:17 +01:00
Tim Steinbach b5fdfc2ec6
linux/hardened/patches/5.9: 5.9.8.a -> 5.9.9.a 2020-11-20 11:31:31 -05:00
Tim Steinbach 1c6f19bfbe
linux/hardened/patches/5.4: 5.4.77.a -> 5.4.78.a 2020-11-20 11:31:29 -05:00
Tim Steinbach 674e6d9c0f
linux/hardened/patches/4.19: 4.19.157.a -> 4.19.158.a 2020-11-20 11:31:27 -05:00
Tim Steinbach c9737f0870
linux/hardened/patches/4.14: 4.14.206.a -> 4.14.207.a 2020-11-20 11:31:25 -05:00
Jan Tojnar f6105d21e3
Merge branch 'master' into staging-next 2020-11-20 01:38:32 +01:00
Martin Weinelt 5928d66704
microcodeIntel: 20201112 -> 20201118
Fixes a regression on some "OEM platforms".

Relates to #104301
2020-11-19 20:30:53 +01:00
Frederik Rietdijk ea7b8978ef Merge master into staging-next 2020-11-19 20:08:15 +01:00
Tim Steinbach 6f4bd3959f
linux_latest-libre: 17762 -> 17768 2020-11-19 09:08:51 -05:00