Commit graph

3911 commits

Author SHA1 Message Date
obadz 231ed9edd9 chromium: split the sandbox into a separate output
Related to #17460 and 66d5edf
Triggers a rebuild of Chromium
2016-08-06 10:29:56 +01:00
obadz 66d5edf654 chromium: add nixos module security.chromiumSuidSandbox
Closes #17460

Changed the wrapper derivation to produce a second output containing the sandbox.
Add a launch wrapper to try and locate the sandbox (either in /var/setuid-wrappers or in /nix/store).
This launch wrapper also sheds libredirect.so from LD_PRELOAD as Chromium does not tolerate it.

Does not trigger a Chromium rebuild.

cc @cleverca22 @joachifm @jasom
2016-08-06 10:27:47 +01:00
Robin Gloster 19158a60cf Merge pull request #17541 from womfoo/bump/wraith-1.4.7
wraith: 1.4.6 -> 1.4.7, fixes build
2016-08-05 19:04:02 +02:00
Kranium Gikos Mendoza 9470b28743 wraith: 1.4.6 -> 1.4.7 2016-08-06 00:05:40 +08:00
obadz d6528a1b7f chromium: fixup commit 33557ac
Helps with #17460

@cleverca22 saw calls to SetuidSandboxHost::GetSandboxBinaryPath so we
patch this function instead.

cc @joachifm
2016-08-05 10:55:48 +01:00
obadz 33557acb36 chromium: add ability to control which sandbox is used
First step towards addressing #17460

In order to be able to run the SUID sandbox, which is good for security
and required to run Chromium with any kind of reasonable sandboxing when
using grsecurity kernels, we want to be able to control where the
sandbox comes from in the Chromium wrapper. This commit patches the
appropriate bit of source and adds the same old sandbox to the wrapper
(so it should be a no-op)
2016-08-04 20:37:35 +01:00
Benjamin Staffin 78e5e61bbe Update google-chrome versions
The previous download links were all broken.

Stable: 51.0.2704.103 -> 52.0.2743.116
Beta:   52.0.2743.41  -> 53.0.2785.34
Dev:    53.0.2767.4   -> 54.0.2816.0
2016-08-04 00:22:58 -04:00
Hector A. Escobedo 594256c3a8 purple-matrix: init at 2016-07-11 2016-08-03 15:46:28 -04:00
Rok Garbas 2a4312d92b
firefox-beta-bin: 48.0b9 -> 49.0b1 2016-08-03 19:39:46 +02:00
mimadrid 4a06ece723
qutebrowser: 0.8.1 -> 0.8.2 2016-08-03 11:02:02 +02:00
zimbatm 2f791c7444 terraform: 0.6.16 -> 0.7.0 2016-08-03 09:53:20 +01:00
Luca Bruno 2cce7a064e telepathy_salut: fix build, add myself as maintainer 2016-08-02 22:00:24 +02:00
Tuomas Tynkkynen 21f17d69f6 treewide: Add lots of meta.platforms
Build-tested on x86_64 Linux & Mac.
2016-08-02 21:42:43 +03:00
Tuomas Tynkkynen 63de40099f treewide: Move some meta sections to end-of-file
That seems to be the overwhelming convention.
2016-08-02 21:17:44 +03:00
Tuomas Tynkkynen 2258b21e4b treewide: Add lots of platforms to packages with no meta
Build-tested on x86_64 Linux and on Darwin.
2016-08-02 21:17:44 +03:00
Tuomas Tynkkynen 59ce911810 treewide: Some EOF-whitespace fixes 2016-08-02 21:17:44 +03:00
taku0 47024938a2 firefox-bin: 47.0.1 -> 48.0 (#17452) 2016-08-02 16:55:55 +02:00
Benno Fünfstück 2c7b5ac8a9 notmuch-mutt: drop unused fetchurl parameter 2016-08-02 11:45:42 +02:00
Benno Fünfstück 58afc252e4 notmuch-mutt: remove unused parameter 2016-08-02 11:39:50 +02:00
Peter Hoeg 8c04c3c899 notmuch-mutt: init at 0.22 2016-08-02 11:39:50 +02:00
Frederik Rietdijk 266fde80ca kde5.konversation: 1.6 -> 1.6.1 2016-08-02 09:00:03 +02:00
Frederik Rietdijk 65c109f887 kde5.konversation: use kdeWrapper 2016-08-02 08:49:12 +02:00
Ioannis Koutras 631edf7de8 syncthing-inotify: init at 0.8.3 2016-07-30 20:19:16 +03:00
Peter Hoeg 10deae8a57 syncthing: 0.14.2 -> 0.14.3 2016-07-30 11:32:43 +08:00
mimadrid 5fbe282abd
wireshark: 2.0.4 -> 2.0.5 2016-07-29 12:11:09 +02:00
mimadrid 2ea77889ad filezilla: 3.19.0 -> 3.20.0 2016-07-27 22:48:43 +02:00
Christian L f51169366b neomutt: 20160611 -> 20160723 (#17268)
For information about what has changes, please refer to
http://www.neomutt.org/2016/07/23/release.
2016-07-27 18:55:48 +02:00
jokogr 54e870e3b1 syncthing: 0.14.0 -> 0.14.2 (#17274)
* Update syncthing from 0.14.0 to 0.14.2
* Use fetchFromGitHub instead of fetchgit
* Add joko to package maintainers
2016-07-27 18:49:43 +02:00
Miguel Madrid 94549d4fab qutebrowser: 0.8.0 -> 0.8.1 (#17302) 2016-07-27 15:50:29 +01:00
Robin Gloster 3882698004 Merge pull request #17294 from kamilchm/fix-mesos-fetcher-extract
mesos: FIX #16917 Failed to extract tgz
2016-07-27 12:23:07 +02:00
Kamil Chmielewski 81efd0c82d mesos: FIX #16917 Failed to extract tgz 2016-07-27 10:11:33 +02:00
Gabriel Ebner 7fce7c5a07 qutebrowser: 0.7.0 -> 0.8.0 2016-07-26 14:53:59 +02:00
Ram Kromberg 5685968ca6 midori: 0.5.8 -> 0.5.11 (#17142) 2016-07-25 21:25:42 +01:00
Kranium Gikos Mendoza a5d1c8d471 bluejeans: 2.160.63.8 -> 2.160.66.8 (#17232) 2016-07-25 20:53:32 +01:00
Maximilian Güntner 1fa6fe72fd unison: 2.48.3 -> 2.48.4 (#17209)
Signed-off-by: Maximilian Güntner <code@maschinenpsychologe.de>
2016-07-25 20:50:09 +01:00
Nikolay Amiantov cce1e9f2f4 tdesktop: use parseDrvName to get Qt release version
Closes #16559
2016-07-23 09:41:25 +03:00
Peter Hoeg 9d53dc00c3 dropbox: 4.4.29 -> 6.4.14 (#17165) 2016-07-23 00:51:55 +02:00
edanaher 5682279d14 pidgin-osd: init at 0.1.0 (#16792)
* pidgin-osd: init at 0.1.0

A straightforward pidgin plugin; kind of ancient, but still works fine.

* Use autoreconf, which minor hackery around ChangeLog.
2016-07-21 01:12:31 +02:00
Rok Garbas f5dca01b50 firefox-bin: 48.0b7 -> 48.0b9 2016-07-21 00:59:56 +02:00
Rok Garbas 0558ae3057 firefox-bin: libpulseaudio.dev is needed otherwise firefox doesn't start 2016-07-21 00:56:38 +02:00
Graham Christensen 5bc522913b Merge pull request #17032 from Ralith/purple-hangouts
purple-hangouts-hg: init at 2016-07-17
2016-07-20 14:38:26 +00:00
Peter Hoeg c5222b9d55 syncthing: 0.13.10 -> 0.14.0 (#17110) 2016-07-20 12:46:22 +02:00
Benjamin Saunders 54b037720d purple-hangouts-hg: init at 2016-07-17 2016-07-19 21:45:48 -07:00
Graham Christensen 098aee0cd7 Merge pull request #17035 from phanimahesh/alpine
alpine:configure: allow using passfile
2016-07-20 02:27:23 +00:00
Frederik Rietdijk bae6ad8efa uzbl: fix build
See also #16740.
2016-07-19 15:06:42 +02:00
kc1212 05274e53f8 syncthing: 0.13.9 -> 0.13.10 (#16912) 2016-07-18 12:46:47 +02:00
J Phani Mahesh 9a4d0d8e44 alpine:configure: allow using passfile 2016-07-17 17:28:10 +05:30
Joachim F 23e27413b3 Merge pull request #17029 from nathanielbaxter/dev/teamspeak_client
teamspeak_client: 3.0.19.1 -> 3.0.19.3
2016-07-17 11:29:01 +02:00
Nathaniel Baxter 3c9788e1ce teamspeak_client: 3.0.19.1 -> 3.0.19.3 2016-07-17 17:06:44 +10:00
Joachim Fasting ec4ae7c8b6
teamspeak_client: specify a custom, nonfree license
The licensing terms depend on use [1], but the software is clearly nonfree.
Previously, the package would happily build even with allowUnfree = false.

[1]: http://sales.teamspeakusa.com/licensing.php
2016-07-17 04:52:22 +02:00