Commit graph

567 commits

Author SHA1 Message Date
Robin Gloster
3f45f0948d Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-03-15 01:44:24 +00:00
Lluís Batlle i Rossell
e026b5c243 Adding rowhammer test. 2016-03-11 14:29:56 +01:00
Luca Bruno
370c318eb0 Merge pull request #13812 from obadz/go-upower-notify
add go-upower-notify
2016-03-11 12:34:11 +01:00
obadz
71ac0cd55e yeshup: init at 5461a8f 2016-03-11 11:24:41 +00:00
Vladimír Čunát
6f9fe31b42 awstats: init at 7.4, including a simple service 2016-03-11 10:37:06 +01:00
Franz Pletz
cb3d27df93 Merge remote-tracking branch 'origin/master' into hardened-stdenv 2016-03-05 18:55:30 +01:00
Franz Pletz
aff1f4ab94 Use general hardening flag toggle lists
The following parameters are now available:

  * hardeningDisable
    To disable specific hardening flags
  * hardeningEnable
    To enable specific hardening flags

Only the cc-wrapper supports this right now, but these may be reused by
other wrappers, builders or setup hooks.

cc-wrapper supports the following flags:

  * fortify
  * stackprotector
  * pie (disabled by default)
  * pic
  * strictoverflow
  * format
  * relro
  * bindnow
2016-03-05 18:55:26 +01:00
Emery
d07d94b97c amtterm: initial package at 1.4
https://www.kraxel.org/cgit/amtterm/
2016-03-04 14:47:47 +01:00
Robin Gloster
3b4765c9e5 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-02-28 16:32:57 +00:00
zimbatm
6a518e51dd Merge pull request #13475 from rimmington/collectd-no-mysql
collectd: allow mysql to be null
2016-02-27 22:24:57 +00:00
Rhys
ac94a5d86c collectd: allow mysql to be null 2016-02-27 12:02:44 +11:00
Robin Gloster
3477e662e6 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-02-27 00:08:08 +00:00
Robin Gloster
87e64f153b cron: enable pie hardening 2016-02-26 17:27:28 +00:00
Tobias Geerinckx-Rice
d9f5e94bae proot: 4.0.3 -> 5.1.0
New features
------------
* Processes under PRoot now appear with their real names, that is,
  they are not renamed ld-linux.so or prooted-... anymore.
* Own ELF loader.

Fixes
-----
* Most bugs related to shebang support -- ie. #! at the beginning of
  a program -- were fixed.
* It is now possible to use GDB against multi-threaded programs under
  PRoot x86_64 and x86.
* It is possible to execute x86_64 programs from x86 programs again.
* It is possible to use x86 ptrace-based programs (strace, gdb, ...)
  under PRoot x86_64 again.
* The loader is now built with the build-id linker option explicitly
  disabled.  This special section might interfere with loaded
  programs.
* The loader can now load relocatable objects that have a predefined
  base address.
2016-02-25 16:21:47 +01:00
Tobias Geerinckx-Rice
ebc9ba92d2 proot: generate and install manual page 2016-02-25 16:21:46 +01:00
Robin Gloster
402d57ee8e bootstrap env: disable stackprotector hardening until gcc >=4.9 2016-02-22 18:32:53 +00:00
Robin Gloster
289599367d stress-ng: 0.05.00 -> 0.05.18
fixes build after broken hash
2016-02-21 10:23:57 +00:00
Robin Gloster
3fead71a0e facter: remove obsolete PIC handling (default now) 2016-02-21 10:01:22 +00:00
Robin Gloster
cdb220fd6f rsyslog: turn off format hardening 2016-02-19 21:15:59 +00:00
Frederik Rietdijk
4d06bf70f4 buildPythonApplication: use new function for Python applications 2016-02-19 13:16:41 +01:00
Robin Gloster
b4e77c34e7 foremost: turn off format hardening 2016-02-10 23:37:25 +00:00
Robin Gloster
5969a59052 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-02-09 16:28:44 +00:00
Charles Strahan
4faeca0cbd nq: init at 0.1
Unix command line queue utility.
2016-02-08 17:28:24 -05:00
Charles Strahan
5691a2a498 xe: init at 0.5
Simple xargs and apply replacement.
2016-02-08 17:27:44 -05:00
Robin Gloster
371b57a716 lr: init at 0.2 2016-02-08 16:30:29 +00:00
Robin Gloster
49d77a685f gdmap: turn off format hardening 2016-02-07 20:43:42 +00:00
Tobias Geerinckx-Rice
ac33b4724a More version attribute tidying where maintainers |= nckx 2016-01-25 20:08:34 +01:00
Tobias Geerinckx-Rice
9fb8020e4e Add version attribute where maintainers |= nckx
This will probably be mandatory soon, and is a step in the right
direction. Removes the deprecated meta.version, and move some meta
sections to the end of the file where I should have put them in
the first place.
2016-01-25 17:35:21 +01:00
Vladimír Čunát
36e7b376eb pciutils: minor update 3.4.0 -> 3.4.1 2016-01-07 00:17:59 +01:00
Arseniy Seroka
16223a4c65 Merge pull request #12057 from womfoo/facter
facter: 3.0.2 -> 3.1.3
2016-01-01 20:54:38 +03:00
Michael Raskin
247c419427 ipmiutil: 2.9.6 -> 2.9.8 2016-01-01 12:30:17 +03:00
Kranium Gikos Mendoza
6c34b9c2ad facter: 3.0.2 -> 3.1.3 2016-01-01 15:47:44 +08:00
Domen Kožar
2be814f21e Merge pull request #11985 from mayflower/update-thinkfan
thinkfan: 0.8.1 -> 0.9.2
2015-12-31 13:41:30 +01:00
Robert Helgesson
73ede34fe5 vbetool: use stdenv
This replaces use of `builderDefsPackage`.
2015-12-30 21:15:15 +01:00
Robin Gloster
7de67f48a5 thinkfan: 0.8.1 -> 0.9.2 2015-12-27 20:27:56 +00:00
Lancelot SIX
f27dee4eb2 pkgs.freeipmi: 1.4.9 -> 1.5.1
See https://lists.gnu.org/archive/html/info-gnu/2015-12/msg00000.html
2015-12-12 15:04:59 +01:00
Frederik Rietdijk
f2ac29648a python ansible2: move to python-packages.nix 2015-12-11 11:28:33 +01:00
Frederik Rietdijk
14167636fc python ansible: move to python-packages.nix 2015-12-11 11:28:33 +01:00
Dan Peebles
12de4d5cb3 ansible2: init 2015-12-03 21:54:45 -05:00
Arseniy Seroka
6f50bbb60e Merge pull request #11323 from gebner/sleuthkit-4.2.0
sleuthkit: 4.1.3 -> 4.2.0
2015-12-01 22:59:10 +03:00
Fabian Schmitthenner
a936b602b5 smartmontools: 6.3 -> 6.4, update driverdb to r4179 2015-11-29 00:31:13 +01:00
Gabriel Ebner
3e7d4ce95a sleuthkit: 4.1.3 -> 4.2.0 2015-11-28 13:32:18 +01:00
Tobias Geerinckx-Rice
2798b02ad0 Convert some *Flags from strings to lists 2015-11-26 23:45:31 +01:00
Joachim Fasting
2a752ac760 setserial: reimplement using mkDerivation 2015-11-24 14:45:15 +01:00
Domen Kožar
47cb9d76d6 Merge pull request #10501 from adnelson/fix_ansible
ansible: fix constants.py patching, do not propagate pythonpaths
2015-11-22 10:13:00 +01:00
Tobias Geerinckx-Rice
0efb1f7963 stress-ng 0.04.21 -> 0.05.00 2015-11-19 23:25:28 +01:00
Jaka Hudoklin
b572ab99f7 Merge pull request #11131 from svend/ipmitool-darwin
ipmitool: Fix build on darwin
2015-11-18 22:56:44 +01:00
Svend Sorensen
95282e3cfc ipmitool: Fix build on darwin
s6_addr16 is not available on Mac OS X.
2015-11-18 10:35:07 -08:00
Pascal Wittmann
7fd2796e99 Replace 'with plaforms; platform' with 'platforms.platform' 2015-11-17 21:30:43 +01:00
Eelco Dolstra
f3bd5e1bd5 fio: 2.2.10 -> 2.2.11 2015-11-11 20:06:32 +01:00