Jörg Thalheim
2e2a5af81f
sysdig: 0.15.0 -> 0.16.0
2017-05-09 09:21:44 +01:00
Joachim Fasting
996b65cfba
linux_hardened: enable structleak plugin
...
A port of the PaX structleak plugin. Note that this version of structleak
seems to cover less ground than the PaX original (only marked structs are
zeroed). [1]
[1]: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c61f13eaa1ee17728c41370100d2d45c254ce76f
2017-05-09 01:38:26 +02:00
Joachim Fasting
1816e2b960
linux_hardened: BUG on struct validation failure
2017-05-09 01:38:24 +02:00
Joachim Fasting
a7ecdffc28
linux_hardened: move to 4.11
...
Note that DEBUG_RODATA has been split into STRICT_KERNEL_RWX &
STRICT_MODULE_RWX, which are on by default (non-optional).
2017-05-09 01:38:22 +02:00
Joachim Fasting
42c58cd2e8
linux_hardened: compile with stackprotector-strong
...
Default is regular, which we need to unset for kconfig to accept the new
value.
2017-05-09 01:38:21 +02:00
Eelco Dolstra
e2700861fb
shadow: Fix hash
2017-05-08 16:56:05 +02:00
Tim Steinbach
8c74ff6534
linux: 4.9.26 -> 4.9.27
2017-05-08 09:26:26 -04:00
Tim Steinbach
4e2c67ff76
linux: 4.4.66 -> 4.4.67
2017-05-08 09:23:52 -04:00
Eelco Dolstra
7f6abddcd7
shadow: Fix using default shell in useradd
...
This caused "useradd xyzzy" to produce a user with no shell:
xyzzy❌ 1002💯 :/home/xyzzy:
https://github.com/shadow-maint/shadow/pull/33
2017-05-08 15:10:50 +02:00
Jörg Thalheim
192f8e7699
broadcom-bt-firmware: revert to unfree
...
license was misinterpreted, it is now only conditionally in the all
firmware list included, if `allowUnfree` is set.
fixes #25567
2017-05-08 09:18:11 +01:00
Joachim F
5250d3ec3d
Merge pull request #25561 from joachifm/linux-gcc-plugins
...
linux: support using gcc plugins
2017-05-07 12:31:32 +01:00
Jörg Thalheim
cc75ccbf64
broadcom-bt-firmware: change license to redistributal
...
see also: https://github.com/winterheart/broadcom-bt-firmware/blob/master/LICENSE.broadcom_bcm20702
fixes #25567
2017-05-07 07:33:41 +01:00
Joachim Fasting
a04d8532c2
linux: support using gcc plugins
...
linux 4.8 onwards support gcc plugins. This patch adds build inputs
required to make use of gcc plugins to the generic kernel build
environment.
2017-05-06 19:47:27 +02:00
Jörg Thalheim
7765e5971c
kernelPackages.zfsUnstable: 0.7.0-rc3 -> 0.7.0-rc4
2017-05-06 07:40:42 +01:00
Jörg Thalheim
4ea961ccc3
kernelPackages.splUnstable: 0.7.0-rc3 -> 0.7.0-rc4
2017-05-06 07:40:28 +01:00
Jörg Thalheim
3156ef2dfd
Merge pull request #25478 from zraexy/zraexy-broadcom-bt-firmware
...
broadcom-bt-firmware: init at 12.0.1.1011
2017-05-04 22:33:06 +01:00
Jörg Thalheim
d072ef956d
broadcom-bt-firmware: mention package limitations
2017-05-04 22:32:55 +01:00
Tim Steinbach
2a38ecc055
linux: 4.10.13 -> 4.10.14
2017-05-03 20:46:48 -04:00
Tim Steinbach
6076843be3
linux: 4.9.25 -> 4.9.26
2017-05-03 20:44:09 -04:00
Tim Steinbach
af933bc7d3
linux: 4.4.65 -> 4.4.66
2017-05-03 20:41:46 -04:00
zraexy
d900478e3c
broadcom-bt-firmware: init at 12.0.1.1011
...
broadcom-bt-firmware: init at 12.0.1.1011
2017-05-03 12:51:32 -08:00
zraexy
7845163d6a
bt-fw-converter: init at 2017-02-19
2017-05-03 12:51:24 -08:00
Cray Elliott
cebce78be9
mwprocapture: fix compile on linux 4.11
2017-05-03 00:11:22 -07:00
Victor Calvert
3d27a84a1c
tomb: 2.2 -> 2.4 ( #25465 )
2017-05-03 00:32:51 +01:00
Jörg Thalheim
7be7902990
zfsUnstable: mark as incompatible with 4.11 (since rc3)
2017-05-02 18:15:53 +02:00
Tim Steinbach
b5169fd277
linux: Add cgroups patches for 4.9, 4.10, 4.11
2017-05-02 08:49:39 -04:00
Vladimír Čunát
d7501b986a
luajit: 2.1.0-beta2 -> 2.1.0-beta3
...
The removal of `luaL_reg` alias caused lots of breakage.
Only sysdig and knot-resolver needed (also) other changes.
2017-05-02 14:00:45 +02:00
Shea Levy
207a0af06a
Add linux 4.11
2017-05-01 19:04:45 -04:00
Jörg Thalheim
95f6bece88
wpa_supplicant: upgrade to qt5
...
also inkscape removal patch, as it introduced a bug: #25320
fixes #25320 #25325
2017-05-01 21:23:22 +02:00
Armijn Hemel
5b0dcf95a0
atop: 2.2-3 -> 2.3.0
2017-05-01 14:45:27 +02:00
Michael Raskin
9c39666613
Merge pull request #25107 from armijnhemel/guvcview
...
guvcview: 2.0.4 -> 2.0.5
2017-05-01 14:15:07 +02:00
Michael Raskin
1cce0887ee
Merge branch 'master' into mptcp-v91.3
2017-05-01 00:43:08 +02:00
michael bishop
70863d5326
ioport: init at 1.2
2017-04-30 18:34:17 -03:00
Michael Raskin
763ed66c24
bluez5: install gatttool; reported by @husnoo
2017-04-30 21:12:37 +02:00
Michael Raskin
929eed352b
Merge pull request #22410 from adnelson/upstart_improvements
...
upstart: wrap binaries and patch hard-coded paths
2017-04-30 18:29:33 +02:00
Tim Steinbach
0c4de3c0c9
linux: 4.4.64 -> 4.4.65
2017-04-30 08:58:44 -04:00
Michael Raskin
b5c3586289
Merge pull request #25333 from zraexy/zraexy-nvidia-x11
...
nvidia-x11: switch download urls to https
2017-04-30 12:23:54 +02:00
Joachim Fasting
ab4fa1cce4
tree-wide: prune some dead grsec leaves
...
The beginning of pruning grsecurity/PaX from the tree.
2017-04-30 12:05:41 +02:00
Joachim Fasting
62f2a1c2be
linux_hardened: init
...
The rationale for this is to have a place to enable hardening features
that are either too invasive or that may be speculative/yet proven to be
worthwhile for general-purpose kernels.
2017-04-30 12:05:39 +02:00
zraexy
563fa2c034
nvidia-x11: switch download urls to https
2017-04-29 13:19:04 -08:00
Jörg Thalheim
6af952fac8
rtkit: fix meta attr
2017-04-29 10:49:12 +02:00
Dan Peebles
90b9719f4f
treewide: fix the remaining issues with meta attributes
2017-04-29 04:24:34 +00:00
Joachim Fasting
32b8512e54
grsecurity: discontinue support
...
Upstream has decided to make -testing patches private, effectively ceasing
free support for grsecurity/PaX [1]. Consequently, we can no longer
responsibly support grsecurity on NixOS.
This patch turns the kernel and patch expressions into build errors and
adds a warning to the manual, but retains most of the infrastructure, in
an effort to make the transition smoother. For 17.09 all of it should
probably be pruned.
[1]: https://grsecurity.net/passing_the_baton.php
2017-04-28 12:35:15 +02:00
Tim Steinbach
7f3b857d0d
linux: 4.4.63 -> 4.4.64
2017-04-27 22:12:35 -04:00
Tim Steinbach
08c44a5cac
linux: 4.10.12 -> 4.10.13
2017-04-27 22:10:06 -04:00
Tim Steinbach
903fec9922
linux: 4.9.24 -> 4.9.25
2017-04-27 22:07:34 -04:00
John Ericson
761af14778
Merge pull request #25227 from obsidiansystems/cross-purge-binutilsCross
...
Purge binutilsCross
2017-04-26 09:09:06 -04:00
John Ericson
295315cc87
binutilsCross: Remove and use binutils instead always
...
See previous commit for what was done to `binutils` to make this
possible.
There were some uses of `forcedNativePackages` added. The
combination of overrides with that attribute is highly spooky: it's
often important that if an overridden package comes from it, the
replaced arguments for that package come from it. Long term this
package set and all the spookiness should be gone and irrelevant:
"Move along, nothing to see here!"
No hashes should be changed with this commit
2017-04-25 21:36:19 -04:00
Kranium Gikos Mendoza
e57bcc7106
facetimehd-firmware: disable aarch64-linux builds
2017-04-26 03:09:24 +03:00
Kranium Gikos Mendoza
88be2f7080
facetimehd: disable aarch64-linux builds
2017-04-26 03:09:24 +03:00
