Commit graph

43482 commits

Author SHA1 Message Date
Ricardo M. Correia
8d54dc6d13 chromium: Add support for grsecurity 2014-05-15 13:25:51 +02:00
Vladimír Čunát
255d86ea99 mesa: use grsec at build time, override at run time
This is needed for grsecurity kernels to be able to build stuff (e.g. pango).
With grsec the libGL is slower, but we don't care much at build time,
so we can share binaries among grsec and nogrsec.

This adds 2-3 MB to nogrsec closures that use mesa drivers (libGL is doubled).
2014-05-15 13:25:51 +02:00
Ricardo M. Correia
d674594ce3 icedtea7: Add support for grsecurity 2014-05-15 13:25:50 +02:00
Ricardo M. Correia
f3967570e7 python-3.4: Add support for grsecurity 2014-05-15 13:25:50 +02:00
Ricardo M. Correia
982c84514b python-3.3: Add support for grsecurity 2014-05-15 13:25:50 +02:00
Ricardo M. Correia
6a4fd79b51 python-2.7: Add support for grsecurity 2014-05-15 13:25:50 +02:00
Ricardo M. Correia
1074a3143e libffi: Add support for grsecurity
Patch taken from Hardened Gentoo
2014-05-15 13:25:50 +02:00
Ricardo M. Correia
72b711bb1f spidermonkey-17: Add support for grsecurity 2014-05-15 13:25:50 +02:00
Vladimír Čunát
3d3aea09b9 fix paxmark on non-linux (a bug in grsecurity PR #1187) 2014-05-15 13:25:49 +02:00
Ricardo M. Correia
6021ce8b83 openjdk: Add support for grsecurity 2014-05-15 13:25:49 +02:00
Ricardo M. Correia
2902c8f628 binutils: Add PaX patch 2014-05-15 13:25:49 +02:00
Ricardo M. Correia
a0f683686c wine: Add support for grsecurity 2014-05-15 13:25:49 +02:00
Ricardo M. Correia
df503a2ad4 openjdkBootstrap: Add support for grsecurity 2014-05-15 13:25:49 +02:00
Ricardo M. Correia
2204eb9f18 ghc: Add support for grsecurity
In this case, we also need to specify compilation flags to mark stacks as
non-executable, otherwise PaX will not allow ghc or binaries built by ghc
to run.  This is what gentoo-hardened does as well.
2014-05-15 13:25:49 +02:00
Ricardo M. Correia
92cc5b8c0c mesa-noglu: Add support for grsecurity 2014-05-15 13:25:48 +02:00
Ricardo M. Correia
667008d56f grub: Add support for grsecurity 2014-05-15 13:25:48 +02:00
Ricardo M. Correia
1380bdfb16 gstreamer: Add support for grsecurity 2014-05-15 13:25:48 +02:00
Ricardo M. Correia
2ef09b10b4 spidermonkey: Add support for grsecurity 2014-05-15 13:25:48 +02:00
Ricardo M. Correia
601bd3e6e5 oraclejdk7: Add support for grsecurity 2014-05-15 13:25:48 +02:00
Ricardo M. Correia
06725e95eb gcc: Add support for grsecurity 2014-05-15 13:25:47 +02:00
Ricardo M. Correia
f9cd53ba18 llvm: Add support for grsecurity 2014-05-15 13:25:47 +02:00
Ricardo M. Correia
b30f41976c polkit: Add support for grsecurity 2014-05-15 13:25:47 +02:00
Ricardo M. Correia
ca0eb9818f firefox: Add support for grsecurity 2014-05-15 13:25:47 +02:00
Ricardo M. Correia
aab9b733c2 qimageblitz: Mark stack as non-executable (patch taken from Gentoo)
This allows applications such as okular and kolourpaint to run in
grsecurity kernels, which disallow executable stacks by default.
2014-05-15 13:25:47 +02:00
Ricardo M. Correia
1c2aacb5d8 spl: Fix compilation with grsecurity's constify plugin and kernels < 3.8 2014-05-15 13:25:47 +02:00
Ricardo M. Correia
8d5ce245a2 grsecurity: Add paxctl, paxmark and stdenv.needsPax to stdenv 2014-05-15 13:25:46 +02:00
aszlig
4be7e939a0
Merge pull request #2645 from vandenoever/ori.
Add ori, a secure distributed filesystem.
2014-05-15 06:31:23 +02:00
Karn Kallio
432998852c Add the Mercury compiler to nixpkgs. 2014-05-14 22:44:38 +02:00
Jason "Don" O'Conal
b11c9c582b perlPackages.MHonArc: add expression 2014-05-14 22:43:19 +02:00
AndersonTorres
2e950bd72e 8086tiny: update to 1.25
Locally build BIOS support
2014-05-14 22:40:09 +02:00
Benjamin Podszun
2ce5162252 Bump virt-viewer to 0.6.0, from the 2009 version 2014-05-14 22:24:01 +02:00
lethalman
0bf388b697 Merge pull request #2618 from coreyoconnor/jmtpfs-upstream
add jmtpfs - a FUSE filesystem for MTP
2014-05-14 22:17:13 +02:00
Austin Seipp
a82e8cbb3d Merge pull request #2415 from cstrahan/libmx
libmx: Add package
2014-05-14 15:04:39 -05:00
Austin Seipp
798a521709 Merge pull request #2423 from giogadi/eigen-3.2.1
eigen: upgrading version to 3.2.1
2014-05-14 15:01:23 -05:00
Austin Seipp
832c1abc91 Merge pull request #2632 from cstrahan/biosdevname
biosdevname: add package
2014-05-14 15:00:10 -05:00
Austin Seipp
3fbe6f3292 Merge pull request #2605 from ro6/master
Ur/Web compiler: new release, 20130421 -> 20140426
2014-05-14 14:59:09 -05:00
Austin Seipp
349b5f1397 Merge pull request #2646 from evolarium/awesome
Update Awesome WM to 3.5.5
2014-05-14 14:58:38 -05:00
Austin Seipp
2558fa587b Merge pull request #2629 from letac/master
Phabricator, a web application, snapshot of 2014-05-12
2014-05-14 14:57:36 -05:00
Austin Seipp
aaf7f570c1 Merge pull request #2438 from falsifian/gnunet_deps
fix GNUnet missing dependencies
2014-05-14 14:56:25 -05:00
Bjørn Forsman
77000f7af0 python-usbtmc: new package
This Python package supports the USBTMC instrument control protocol for
controlling instruments over USB.

http://alexforencich.com/wiki/en/python-usbtmc/start
2014-05-14 21:50:36 +02:00
Bjørn Forsman
bc847600a9 python-pyusb: new package
PyUSB is a Python module that wraps libusb 1.0. (It can wrap other USB
libraries too, but I've hardcoded it for libusb as it seems the most
appropriate.)
2014-05-14 21:50:35 +02:00
lethalman
8967d2d3b3 Merge pull request #2301 from bjornfor/graphite-fixes
nixos/graphite-service: fix startup
2014-05-14 21:44:43 +02:00
Shea Levy
2baeefee27 Add function for fetching from a private git repo 2014-05-14 14:47:42 -04:00
Jordan Patterson
26f2d67a65 Update Awesome WM to 3.5.5
Fix LGI test
Prefix LD_LIBRARY_PATH instead of clobbering it
2014-05-14 12:25:26 -06:00
Jos van den Oever
8d6a940057 Add ori, a secure distributed filesystem. 2014-05-14 20:07:39 +02:00
Peter Simons
3c656b702c haskell-defaults.nix: don't provide gloss to ghc < 7.8 2014-05-14 15:02:35 +02:00
Peter Simons
edd71867e5 haskell-websockets: require QuickCheck 2.6 2014-05-14 15:02:35 +02:00
Peter Simons
481ec8ab9b haskell-usb: jailbreak to fix build with text 1.x 2014-05-14 15:02:35 +02:00
Peter Simons
ded83927ba haskell-snaplet-stripe: jailbreak to fix build with text 1.x 2014-05-14 15:02:35 +02:00
Peter Simons
237b2de6a0 haskell-parsec-3.1.3: jailbreak to fix build with text 1.x 2014-05-14 15:02:35 +02:00