Franz Pletz
fb57bfbd4f
php: enable PIE hardening
2016-03-06 00:15:18 +01:00
Franz Pletz
aff1f4ab94
Use general hardening flag toggle lists
...
The following parameters are now available:
* hardeningDisable
To disable specific hardening flags
* hardeningEnable
To enable specific hardening flags
Only the cc-wrapper supports this right now, but these may be reused by
other wrappers, builders or setup hooks.
cc-wrapper supports the following flags:
* fortify
* stackprotector
* pie (disabled by default)
* pic
* strictoverflow
* format
* relro
* bindnow
2016-03-05 18:55:26 +01:00
Robin Gloster
fed49425c5
Merge remote-tracking branch 'upstream/master' into hardened-stdenv
2016-03-03 16:11:55 +00:00
Robin Gloster
5936d6dbbb
Revert "rubygems: 2.4.8 -> 2.5.2"
...
This reverts commit 7e8faf022f
.
This breaks the rake call in gitlab see
https://github.com/NixOS/nixpkgs/pull/13468#issuecomment-191286066
2016-03-02 15:25:35 +00:00
Robin Gloster
33f7d0b3f6
Merge remote-tracking branch 'upstream/master' into hardened-stdenv
2016-03-01 22:46:39 +00:00
Robin Gloster
d47857c3d9
Merge remote-tracking branch 'upstream/master' into hardened-stdenv
2016-03-01 21:09:17 +00:00
Pascal Wittmann
d2e15a02d7
mujs: 2015-09-29 -> 2016-02-22
2016-03-01 22:08:26 +01:00
Pascal Wittmann
69237f371c
Merge pull request #13586 from zimbatm/bats-fixup
...
bats: fixes installation
2016-03-01 15:19:03 +01:00
Lancelot SIX
75591b49be
Merge pull request #13468 from zimbatm/rubygems-2.5.2
...
rubygems: 2.4.8 -> 2.5.2
2016-03-01 09:31:36 +01:00
zimbatm
a3119bd35d
bats: fixes installation
...
The build was failing with:
/...-stdenv/setup: ./install.sh: /usr/bin/env: bad interpreter: No such file
or directory
See https://hydra.nixos.org/build/32353411/log
2016-03-01 00:19:27 +00:00
Robin Gloster
85515f0be8
clisp_2_44_1: disable format hardening
2016-02-29 09:44:42 +00:00
Robin Gloster
4d6db3c64c
perl520: fix bootstrap compilation by disabling fortify hardening
2016-02-28 19:45:02 +00:00
Robin Gloster
3b4765c9e5
Merge remote-tracking branch 'upstream/master' into hardened-stdenv
2016-02-28 16:32:57 +00:00
Michael Raskin
c0f20c5912
Merge pull request #13518 from leenaars/love2
...
love: fix broken 0.8.2 + added version 0.72
2016-02-28 09:35:54 +00:00
Michiel Leenaars
62c3ad1dde
love: fix broken 0.8 + added version 0.72
2016-02-27 22:37:36 +01:00
Eelco Dolstra
be4ebe0046
perl: 5.22.0 -> 5.22.1
2016-02-27 22:22:26 +01:00
Eelco Dolstra
7627bf6f3f
perl: Unify 5.20 and 5.22 expressions
2016-02-27 22:22:26 +01:00
zimbatm
17348dc094
Remove all dots at end of descriptions
...
Specially crafted for @JagaJaga
find pkgs -name "*.nix" -exec \
sed -e 's|\(description.*\)\.";|\1";|g' -i {} \;
2016-02-27 17:30:29 +00:00
Robin Gloster
3477e662e6
Merge remote-tracking branch 'upstream/master' into hardened-stdenv
2016-02-27 00:08:08 +00:00
zimbatm
7e8faf022f
rubygems: 2.4.8 -> 2.5.2
...
Closes #11950
2016-02-26 18:02:24 +00:00
Robin Gloster
7412bffd9e
self: use default compiler
2016-02-26 15:42:23 +00:00
Robin Gloster
2700dac7de
lush: disable pic hardening
2016-02-24 22:17:45 +00:00
Robin Gloster
18adc96e0f
supercollider: disable fortify hardening
2016-02-24 21:29:55 +00:00
zimbatm
cdbaee7d4b
Merge pull request #12866 from nathan7/rubygem-drvname-fix
...
buildRubyGem: ensure gem versions don't get misparsed
2016-02-23 23:13:12 +00:00
zimbatm
49217b724f
Merge pull request #12786 from phunehehe/unused-bundler-head
...
remove unused file bundler-head.nix
2016-02-23 22:39:55 +00:00
Robin Gloster
402d57ee8e
bootstrap env: disable stackprotector hardening until gcc >=4.9
2016-02-22 18:32:53 +00:00
Robin Gloster
bb2639aafc
Merge branch 'curl-7.15-fixup' of https://github.com/zimbatm/nixpkgs into hardened-stdenv
2016-02-22 01:14:22 +00:00
Charles Strahan
123a9104e4
Merge pull request #13109 from zimbatm/ruby-fixes
...
Ruby fixes
2016-02-20 20:29:25 -05:00
Robin Gloster
bc21db3692
Merge remote-tracking branch 'upstream/master' into hardened-stdenv
2016-02-19 21:16:14 +00:00
zimbatm
a92c609ec6
gemconfig: add eventmachine and msgpack
2016-02-18 23:44:50 +00:00
zimbatm
24e0fc99f9
buildRubyGem: remove unecessary duplication
2016-02-18 23:44:49 +00:00
Vladimír Čunát
e9520e81b3
Merge branch 'master' into staging
2016-02-17 10:06:31 +01:00
Arseniy Seroka
7c477195aa
Merge pull request #12991 from leenaars/love
...
love -> 0.10 added
2016-02-15 22:12:57 +03:00
Franz Pletz
41698c9efa
Merge branch 'master' into hardened-stdenv
2016-02-15 20:05:29 +01:00
Michiel Leenaars
f4a32be729
love: 0.8 -> 0.10.1
2016-02-15 17:10:26 +01:00
zimbatm
9acbb9021b
bundix: cleaner substitution
...
Use the builtin substituteInPlace instead of sed
2016-02-14 17:57:18 +00:00
Arseniy Seroka
af8a9e2203
Merge pull request #12944 from zimbatm/jruby-9.0.5.0
...
jruby: 1.7.21 -> 9.0.5.0
2016-02-12 20:56:29 +03:00
Michael Fellinger
b9c13dcbc7
bundix: 2.0.4 -> 2.0.5
...
Fixes issue with the -d flag creating duplicated `dependencies` properties.
2016-02-12 09:56:02 +01:00
Robin Gloster
40b7aa3d69
erlangR14: turn off format hardening
2016-02-12 01:04:15 +00:00
zimbatm
447851b9d2
jruby: 1.7.21 -> 9.0.5.0
2016-02-11 23:31:41 +00:00
Eelco Dolstra
fc84ee22df
php: Remove version 5.4 which is EOL
2016-02-11 11:27:34 +01:00
Eelco Dolstra
42634fe6cc
php: 5.5.31 -> 5.5.32
2016-02-11 11:24:54 +01:00
Eelco Dolstra
b061225c54
php: 5.6.17 -> 5.6.18
2016-02-11 11:24:48 +01:00
Michael Fellinger
db6f59619d
bundix: 1.0.4 -> 2.0.4
2016-02-10 23:27:33 +00:00
Arseniy Seroka
3b1d18ff48
Merge pull request #12919 from zimbatm/new-bundix2
...
bundix: 1.0.4 -> 2.0.4
2016-02-10 16:04:31 +03:00
Michael Fellinger
112476ec96
bundix: 1.0.4 -> 2.0.4
2016-02-10 12:02:10 +00:00
Robin Gloster
94a74cb14d
spidermonkey: turn off format hardening
2016-02-08 00:18:44 +00:00
Nathan Zadoks
c998447a13
buildRubyGem: pass the gem version through into the derivation name
2016-02-07 16:53:31 +01:00
Nathan Zadoks
b4da3bb88b
buildRubyGem: ensure gem versions don't get misparsed
...
Without this, every nix-env --upgrade replaces ruby with an
arbitrary gem, which makes Ruby unusuable from user environments.
2016-02-07 16:53:27 +01:00
Robin Gloster
9492e06315
Merge remote-tracking branch 'upstream/master' into hardened-stdenv
2016-02-07 14:44:27 +00:00