Commit graph

4793 commits

Author SHA1 Message Date
Domen Kožar
c00fc87f96 Merge pull request #12905 from tg-x/pflask
pflask
2016-02-10 21:20:14 +00:00
tg(x)
60969ab937 pflask: use waf package 2016-02-10 20:34:28 +01:00
Eelco Dolstra
aea262f654 Fix misspelled meta.maintainers attributes 2016-02-10 14:59:50 +01:00
Daniel Peebles
12fbbc20ec Merge pull request #12911 from tg-x/grsec-url
grsecurity: use source URL from a scraped repository
2016-02-09 23:45:08 -05:00
tg(x)
42deddb17a grsecurity: use source URL from a scraped repository as grsecurity.net only has the latest version 2016-02-10 00:46:11 +01:00
Robin Gloster
f0e6c6ec0e linuxPackages.zfs: turn off pic hardening 2016-02-09 23:35:35 +00:00
Robin Gloster
332c84196c linuxPackages.perf: set -Wno-error=bool-compare 2016-02-09 23:17:13 +00:00
Tobias Geerinckx-Rice
4dacb1116a mcelog: 129 -> 130
Fixes https://github.com/andikleen/mcelog/issues/31.
2016-02-10 00:07:10 +01:00
Robin Gloster
9620a43228 linuxPackages.batman_adv: turn off pic hardening 2016-02-09 22:47:47 +00:00
tg(x)
c7ef45e153 pflask: git-2015-10-06 -> git-2015-12-17 2016-02-09 22:54:03 +01:00
tg(x)
0ce6603bd8 pflask 2016-02-09 22:44:44 +01:00
Robin Gloster
5969a59052 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-02-09 16:28:44 +00:00
Tim Steinbach
2fabb4b34d linux-testing: 4.5-rc2 -> 4.5-rc3 2016-02-09 14:38:06 +00:00
Domen Kožar
01bbd3311f Merge pull request #12852 from kragniz/linux-testing-4.5-rc2
linux-testing: 4.4-rc8 -> 4.5-rc2
2016-02-09 04:43:26 +00:00
Tobias Geerinckx-Rice
82e15d9914 pagemon: 0.01.07 -> 0.01.08
Main changes:
- Add 'c' key to close pop up windows
- Enable -p option to have the PID or name of the process to monitor
- Fix zoom scaling on memory view
- Don't break on failed seek or read of map info

More:
f172bd17e7/debian/changelog
2016-02-08 21:06:08 +01:00
Robin Gloster
7c206e8c4c linuxPackages.spl: no pic hardening 2016-02-07 22:45:34 +00:00
Robin Gloster
33a0e63fbf linuxPackages.v4l2loopback: no format/pic hardening 2016-02-07 22:45:28 +00:00
Robin Gloster
543dfcc686 disk_indicator: turn off hardening fortify 2016-02-07 19:26:33 +00:00
Vladimír Čunát
a115bff08c Merge branch 'master' into staging 2016-02-07 13:52:42 +01:00
Robin Gloster
9229e9c656 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-02-07 11:17:57 +00:00
Louis Taylor
12ca23d650 linux-testing: 4.4-rc8 -> 4.5-rc2 2016-02-06 20:54:55 +00:00
Eelco Dolstra
20b54bd989 Merge pull request #12724 from abbradar/udev-hwdb
udev service: generate hwdb database from all udev packages
2016-02-03 14:24:11 +01:00
Tuomas Tynkkynen
7db1cba057 kernel: Let the kernel build system strip modules
Since commit 48f51f1185 we let the kernel build system compress the
modules, which makes the original strip expression not work. Let the
kernel build system strip them as well so they get stripped.
2016-02-02 22:47:32 +02:00
Eelco Dolstra
7b772ae398 linux: Update to 3.10.96, 3.12.53, 3.14.60, 3.18.26, 4.1.17, 4.4.1 2016-02-02 16:38:42 +01:00
Eelco Dolstra
48f51f1185 linux: Compress kernel modules
This reduces the kernel package from 185 to 62 MiB, for a neglible
boot time cost.
2016-02-01 18:19:23 +01:00
Eelco Dolstra
72a30ae66f linux: Use $SOURCE_DATE_EPOCH as the build timestamp 2016-02-01 18:19:23 +01:00
Eelco Dolstra
0a7cd3c110 Remove unused file 2016-02-01 18:19:23 +01:00
Nikolay Amiantov
5404714997 systemd: add a notice to remove makeFlags on update 2016-02-01 20:15:29 +03:00
Robin Gloster
d2d9b7a7bc drbd: set DESTDIR 2016-02-01 18:11:36 +01:00
Lluís Batlle i Rossell
b2dc647c1e linux: adding PCI Expresscard Hotplug support 2016-02-01 11:07:08 +01:00
Peter Simons
b7badc6be0 powertop: call "xset" from $PATH
Patch the source code to find "xset" in $PATH rather than expecting the
hard-coded path "/usr/bin/xset" to work. I've decided *not* to hard-code
a proper path like "${xset}/bin/xset", because that reference greatly
increases the size of the powertop closure. Since "xset" is required
only for --calibrate (and that even seems to work fine without it), it
felt like an optional dependency is more appropriate in this case.

Thanks to @heydojo locating the source code file that needs patching.

Fixes https://github.com/NixOS/nixpkgs/issues/12662.
2016-01-31 21:44:36 +01:00
Arseniy Seroka
bc0b9b7eb0 Merge pull request #12696 from zimbatm/firmware-linux-nonfree
firmware-linux-nonfree: update to master
2016-01-31 15:31:36 +03:00
Tobias Geerinckx-Rice
d28a06553e pagemon: 1.01.06 -> 1.01.07
Changes:
  * Mix checksum up a bit more and return OK if nothing has changed
  * Optimize page reading, reduced by ~2% CPU
  * Add perf page statistics 'p' option
  * Add OOM score to VM stats
  * Optimize read_maps: don't re-scan page mapping if nothing changed
  * Reduce amount of seeks and reads on pagemap data

More: https://github.com/ColinIanKing/pagemon/blob/master/debian/changelog
2016-01-31 02:32:11 +01:00
zimbatm
de68a49259 firmware-linux-nonfree: update to master 2016-01-30 23:55:07 +00:00
Robin Gloster
cce1bad2e1 dmraid: add patch to build with format hardening 2016-01-30 16:36:57 +00:00
Robin Gloster
78a1ae85ed drbd: set DESTDIR 2016-01-30 16:36:57 +00:00
Robin Gloster
1581f25a07 multipath-tools: no format hardening 2016-01-30 16:36:57 +00:00
Robin Gloster
f6d3b7a2ae switch hardening flags 2016-01-30 16:36:57 +00:00
Franz Pletz
954e9903ad Use a hardened stdenv by default 2016-01-30 16:36:57 +00:00
Franz Pletz
bfded63cf8 Merge pull request #12676 from datakurre/datakurre-pam_2uf
pam_u2f: 1.0.1 -> 1.0.4
2016-01-30 15:54:58 +01:00
Tony White
ddfb660f7b kde5 bluedevil plasmoid : enable bluez5 bluetooth functionality
- Fixed a bug in bluedevil (link to a .js file)
    - Made bluez5 the default bluetooth service except for kde4
    - created org.bluez.obex systemd dbus service
    - Patched bluez5 using bluez-5.37-obexd_without_systemd-1.patch
    in order to enable obex when using either the bluedevil plasmoid
    or dolpin file manager within plasma workspaces 5.

    The functionality was tested using a Sony Xperia Z, the machine
    and the handset paired  and two different files were sent in both
    directions successfully.
2016-01-29 22:08:42 +00:00
Asko Soukka
da79b5305e pam_u2f: 1.0.1 -> 1.0.4 2016-01-29 20:49:29 +02:00
Vladimír Čunát
de0af30716 Merge branch 'master' into staging 2016-01-29 10:19:48 +01:00
Kranium Gikos Mendoza
9213916ca7 facetimehd: init at git-20160127 2016-01-28 02:59:36 +08:00
Kranium Gikos Mendoza
fdb5563bcc facetimehd-firmware: init at 1.43 2016-01-28 02:59:36 +08:00
Tobias Geerinckx-Rice
de43878f09 pagemon: init at 0.01.06 2016-01-27 04:42:12 +01:00
Tobias Geerinckx-Rice
32f4fb1ef5 nfs-utils: 1.3.2 -> 1.3.3
A very noisy change log is available for download at:
http://sourceforge.net/projects/nfs/files/nfs-utils/1.3.3/1.3.3-Changelog/download
2016-01-27 01:16:21 +01:00
Nikolay Amiantov
6563fa6125 nvidia_x11: move vdpau libraries to lib/vdpau 2016-01-26 04:30:26 +03:00
Tobias Geerinckx-Rice
ac33b4724a More version attribute tidying where maintainers |= nckx 2016-01-25 20:08:34 +01:00
Tobias Geerinckx-Rice
9fb8020e4e Add version attribute where maintainers |= nckx
This will probably be mandatory soon, and is a step in the right
direction. Removes the deprecated meta.version, and move some meta
sections to the end of the file where I should have put them in
the first place.
2016-01-25 17:35:21 +01:00
Franz Pletz
c485ba1c66 batman-adv: 2015.2 -> 2016.0 2016-01-24 05:20:18 +01:00
Dan Peebles
ef1f64106f kernel: add back the patch I just removed by accident 2016-01-24 04:12:17 +00:00
Dan Peebles
78956c77c0 linux: 4.3.3 -> 4.34 (and update grsecurity patches, too) 2016-01-24 03:53:46 +00:00
Tobias Geerinckx-Rice
32d40f0f98 Remove no longer (or never) referenced patches
55 files changed, 6041 deletions. Tested with `nix-build -A tarball`.
2016-01-24 02:02:21 +01:00
Philipp Volguine
af2b47646c Merge remote-tracking branch 'philhub/master' 2016-01-23 21:19:34 +00:00
Philipp Volguine
7c4830f3b7 Version bump of e1000e driver (2.5.4 -> 3.3.1) 2016-01-23 21:17:56 +00:00
Austin Seipp
d787c2258b nixpkgs: systemd - add some more dependencies
Signed-off-by: Austin Seipp <aseipp@pobox.com>
2016-01-23 17:48:41 +00:00
Dan Peebles
8f9aea9ccc grsecurity: fix kernel config and uncomment grsecurity kernels 2016-01-23 16:58:44 +00:00
Dan Peebles
bffc446394 paxtest: init at 0.9.14 2016-01-23 14:36:08 +00:00
Dan Peebles
33cf0792b1 grsecurity-testing: update patches and associated kernel version 2016-01-23 14:29:34 +00:00
Nikolay Amiantov
29785c5b7a Merge pull request #12309 from zohl/chromiumos-kernel
Add ChromiumOS kernels
2016-01-23 13:13:59 +03:00
Nikolay Amiantov
34769a3d72 Merge pull request #12508 from heydojo/ati-drivers-backport
ati-drivers: Restore opengl & direct rendering
2016-01-23 12:00:19 +03:00
Vladimír Čunát
0957359568 Merge branch 'staging' 2016-01-22 13:48:35 +01:00
aszlig
8c4256e651
lvm2: 2.02.132 -> 2.02.140
Upstream changelog can be found at:

https://git.fedorahosted.org/cgit/lvm2.git/tree/WHATS_NEW?h=v2_02_140&id=0faa27d4f55abcda5fa94ef92343eb44e95ada89

I have tested this with:

nix-build nixos/release.nix -A tests.installer.lvm.x86_64-linux

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-01-22 13:30:43 +01:00
Luca Bruno
4ac19877d7 Merge pull request #12522 from mbakke/bluez-5.37
bluez5: 5.36 -> 5.37
2016-01-21 21:21:27 +01:00
aszlig
05fed13de3
multipath_tools: Cleanup and update to v0.5.0
Previously, version 0.4.9 was a tarbomb and in version 0.5.0 this
fortunately isn't the case anymore so we don't need to set sourceRoot by
ourselves.

I've also moved the definition of makeFlagsArray to the attribute
makeFlags, because we can use $(var) to substitute shell variables
within make.

The references to /lib/udev/scsi_id no longer exist in version 0.5.0 and
it seems that libudev is used directly.

Nevertheless, there are still references to FHS paths such as /var/run,
/etc/multipath.conf and /etc/multipath but these are only relevant at
runtime and can be configured to point to a different path elsewhere.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-01-21 16:18:13 +01:00
Marius Bakke
889ebe6b28 bluez5: 5.36 -> 5.37 2016-01-21 14:39:52 +00:00
Tony White
722c616b8f ati-drivers: Restore opengl & direct rendering
- Removed a collision in the nix store
- Removed dependency on qt
- Fixed opengl and direct rendering by correcting some link paths
- Some code refactored in builder.sh
- Comments added/modified

This pull request fixes #11740 and I recommend that it be considered
as a hotfix for the stable channel due to the fact that opengl
and direct rendering are broken there too.
2016-01-20 19:51:52 +00:00
Vladimír Čunát
4824f73cb3 linux-4.2: remove as it's no longer maintained upstream
grsecurity still holds a reference to it,
but I prefer it to fail than to use a version
that is most likely not secure anymore.
2016-01-20 20:15:07 +01:00
Nathan Zadoks
23f5e3c90f linux: patch CVE-2016-0728 (close #12492)
The PoC provided successfully escalates privileges from a local user to
root. The vulnerability affects any Linux Kernel version 3.8 and higher.
http://perception-point.io/2016/01/14/analysis-and-exploitation-of-a-linux-kernel-vulnerability-cve-2016-0728/
2016-01-20 09:31:53 +01:00
Guillaume Maudoux
f8ff4691ed linux-mptcp: init at 0.90 (kernel 3.18.20), fixes #11149 2016-01-20 02:11:09 +01:00
Tuomas Tynkkynen
69ba6c1d30 mmc-utils: init at 2015-11-18, fixes #12489 2016-01-20 01:50:34 +01:00
Ricardo M. Correia
d51204e8de zfs: 0.6.5.3 -> 0.6.5.4 2016-01-19 16:34:14 +01:00
Ricardo M. Correia
fe53cb56d9 spl: 0.6.5.3 -> 0.6.5.4 2016-01-19 16:34:14 +01:00
Vladimír Čunát
72e6e6a483 tarball: fix evaluation of mdadm on darwin
It probably doesn't make any sense to have mdadm on darwin,
but we have to "fail in a right way".
2016-01-18 15:05:38 +01:00
Robin Gloster
53b389327e refactor to use autoreconfHook where possible
Close #12446.
2016-01-18 10:45:31 +01:00
Vladimír Čunát
620c147cce Merge branch 'master' into staging 2016-01-18 09:48:49 +01:00
aszlig
011c149ed5
mdadm: Set allowedReferences to only include libc.
The updates we had in the past (7719f7f and 1faf610) broke the mdadm
installer test and systems in the wild using mdraid because newer mdadm
versions contained a self-referenc to its own store path.

Instead of putting a big warning about updating in the package
expression, let's just add allowedReferences so the build immediately
fails if there is a self-reference.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-01-18 04:21:16 +01:00
aszlig
5e227e6f1d
mdadm: Clean up package expression.
Let's use makeFlags directly instead of stitching together a
makeFlagsArray in preBuild.

This should make the expression much more readable and clean.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-01-18 04:21:16 +01:00
aszlig
bcd31d0acb
mdadm: 3.3 -> 3.3.4
Okay, this update is a bit more tricky and the patch I've included is
not very nice to be honest.

So the patch causes "mdadm --udev-rules" to search for the right store
path using /proc/self/exec. This has the disadvantage that we could end
up having /run/current-system/bin/mdadm in the rule file.

But on the other hand, when we're on NixOS, we don't need to use that
command *at*all*, so we should be safe.

The patch also sets BINDIR to /sbin, which causes the included rule and
systemd files to not work out of the box on NixOS. But we have a
substituteInPlace where we do rewrite /sbin/mdadm to the right store
path in our udev rule generator, so that shouldn't be an issue.

I've tested this using the mdraid installer test and it succeeded.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-01-18 04:21:15 +01:00
koral
dd4dd8c87a conky: 1.10.0 -> 1.10.1 2016-01-17 11:22:10 +01:00
Pascal Wittmann
edeaa7d26c linuxConsoleTools: 1.4.8 -> 1.4.9 2016-01-15 21:36:23 +01:00
Simon Jagoe
42d4175e4e kernel: 4.1.13 -> 4.1.15 (close #12408) 2016-01-15 19:59:52 +01:00
Vladimír Čunát
2d0893088f Merge branch 'master' into staging 2016-01-15 13:43:57 +01:00
Svein Ove Aas
805d453bc2 nvidia: branch update 352.63 -> 358.16 (close #12272)
Tested & reviewed by vcunat:
- the patch seems not needed anymore,
- reflects changes in their build system
  ftp://download.nvidia.com/XFree86/packaging/linux/new-kbuild-for-355/README
2016-01-14 12:32:53 +01:00
Al Zohali
860d8c3a55 rt5677-firmware: init at 20160110 2016-01-13 22:43:19 +03:00
Al Zohali
a3a5bc6095 linux_chromiumos_3_14: init at 3.14.0
Co-authored-by: Nikolay Amiantov <ab@fmap.me>
2016-01-13 22:43:19 +03:00
Al Zohali
ee9e7b7224 linux_chromiumos_3_18: init at 3.18.0
Co-authored-by: Nikolay Amiantov <ab@fmap.me>
2016-01-13 22:43:19 +03:00
Nikolay Amiantov
957b09d61a android-udev-rules: 20151108 -> 20151209 2016-01-13 21:21:43 +03:00
lethalman
e1eea5ad7f Merge pull request #12360 from kragniz/powertop-v2.8
powertop: 2.7 -> 2.8
2016-01-13 14:18:52 +01:00
Louis Taylor
6ac550a3e9 powertop: 2.7 -> 2.8
Removed patch, since an equivalent fix was made upstream and included in
the 2.8 release.
2016-01-13 12:06:33 +00:00
Louis Taylor
2dd99b8abb kmod: 21 -> 22 2016-01-13 11:46:15 +00:00
Tobias Geerinckx-Rice
5904738557 regionset: 20030629 -> 0.2
Later version with cleaned-up code and a very basic man page.
2016-01-13 03:30:56 +01:00
Shea Levy
44274f62f5 linux: Add 4.4 2016-01-12 19:39:00 -05:00
Lluís Batlle i Rossell
1792ca5810 Increasing mmc possible partitions from 8 to 32.
In kernel common config. I have a modern tablet with 18 gpt partitions
on eMMC (Android+Win10 dualboot).
2016-01-11 09:27:58 +01:00
Tim Steinbach
f318049964 kernel: 4.3.2 -> 4.3.3 2016-01-11 02:08:31 +00:00
Tobias Geerinckx-Rice
228774aaf5 wis_go7007: remove dead package & module
Broken since 2014, but basically a package from 2008 with no
upstream.
2016-01-11 00:16:01 +01:00
Aristid Breitkreuz
6fc1c08324 Merge pull request #12143 from NeQuissimus/kernel440rc8
linux-testing: 4.4.0-rc7 -> 4.4.0-rc8
2016-01-10 21:07:46 +01:00
Aristid Breitkreuz
9c92faf370 Merge pull request #12133 from dwe11er/new-package/irqbalance
irqbalance: init at 1.1.0
2016-01-10 21:06:50 +01:00
Dan Peebles
a3dcb3051d apple-source-releases: bump many packages to 10.10.5
This also changes the versioning scheme to be in more "human-meaningful"
terms, so instead of the internal release numbers we talk about 10.10.5
or 10.9.5.
2016-01-10 14:53:44 -05:00