Joachim Fasting
d82ddd6dc0
grsecurity: 4.7-201608131240 -> 4.7-201608151842
2016-08-16 17:50:37 +02:00
Joachim Fasting
b1cceeda84
grsecurity: enable pax size overflow plugin
2016-08-16 17:50:36 +02:00
Joachim Fasting
3fcb9e6f57
grsecurity: support non-enforcing mode
...
Until we've made sure that most things actually work out of the box, we
need to give people a way of continuing to use the system without
completely disabling grsecurity.
Set sysctl kernel.pax.softmode=1 or boot with pax.softmode=1
2016-08-16 17:50:36 +02:00
Robin Gloster
33e1c78ae3
Merge remote-tracking branch 'upstream/master' into hardened-stdenv
2016-08-16 07:54:01 +00:00
Nikolay Amiantov
081ac25dc6
kmod: 22 -> 23, add /lib/modules to module directories
2016-08-16 02:42:19 +03:00
Shea Levy
9adad8612b
Revert "Merge branch 'modprobe-fix' of git://github.com/abbradar/nixpkgs"
...
Was meant to go into staging, sorry
This reverts commit 57b2d1e9b0760b2b9048
2016-08-15 19:05:52 -04:00
Shea Levy
57b2d1e9b0
Merge branch 'modprobe-fix' of git://github.com/abbradar/nixpkgs
2016-08-15 19:01:44 -04:00
Nikolay Amiantov
1afd250676
treewide: replace several /sbin paths by /bin
2016-08-16 00:19:25 +03:00
Nikolay Amiantov
131fca0a85
kmod: add patch to allow searching for modules in several directories
2016-08-16 00:19:25 +03:00
Joachim Fasting
9062c67914
grsecurity: 4.6.5-201607312210 -> 4.7-201608131240
2016-08-15 20:36:46 +02:00
Moritz Ulrich
21df40f85f
systemd-cryptsetup-generator: Fix bug.
...
The annoying wrapper script also wraps `systemd-cryptsetup`. We need to
copy the original binary to $out too.
2016-08-15 12:42:44 +02:00
Nikolay Amiantov
5b296a1470
Merge branch 'master' into staging
2016-08-15 10:34:28 +03:00
Franz Pletz
64c79e8526
linux: 4.6.5 -> 4.6.6
2016-08-15 04:28:08 +02:00
Franz Pletz
2a8718fb0b
linux_4_5: remove, not support by upstream anymore
2016-08-15 04:28:02 +02:00
Robin Gloster
a37d695c95
linuxPackages.spl: remove unnecessary substituteInPlace
...
`substituteInPlace` was operating on a non-existant file.
Updated to use `autoreconfHook`.
2016-08-14 22:55:21 +00:00
Dan Peebles
ea34fe82bc
swift-corefoundation: some cleanup
...
I upstreamed some patches so I'm using those now
2016-08-14 18:22:19 -04:00
Dan Peebles
4705a9a6c1
swift-corefoundation: actually remove spurious dependency
2016-08-14 17:42:03 -04:00
Dan Peebles
6cf13bfe66
swift-corefoundation: remove spurious buildInput
...
libpthread is part of libSystem, so there's no need to depend on it
explicitly
2016-08-14 17:40:05 -04:00
Dan Peebles
1861744e7c
swift-corefoundation: init
...
This currently only produces a static library, but is a start :) soon we
might be able to incorporate it into our stdenv, but we need to get the
build system to produce a proper .framework first.
2016-08-14 17:35:44 -04:00
Dan Peebles
98b5e3a531
darwin.libpthread: fix messed-up header
...
We don't actually need the private headers and the private qos.h was
overwriting the public one, causing weird issues downstream (especially
with Swift's CoreFoundation)
2016-08-14 17:34:55 -04:00
Michele Guerini Rocco
7522de2f4b
btfs: 2.10 -> 2.11 ( #17737 )
...
(cherry picked from commit 340a9571f5
2016-08-14 21:14:20 +00:00
Robin Gloster
a6c5638565
Revert "btfs: 2.10 -> 2.11 ( #17737 )"
...
This reverts commit 340a9571f5
2016-08-14 21:12:21 +00:00
Michele Guerini Rocco
340a9571f5
btfs: 2.10 -> 2.11 ( #17737 )
2016-08-14 22:48:56 +02:00
Nikolay Amiantov
3e84cbc4ca
autofs5: 5.1.1 -> 5.1.2
2016-08-14 22:39:18 +03:00
Nikolay Amiantov
c60deb0266
quote homepages for better clickability
...
Done while I was traversing packages which I maintain to save extra clicks on
urxvt (it captures semicolon as a part of URL).
2016-08-14 22:37:10 +03:00
Nikolay Amiantov
b30f4e5e4f
android-udev-rules: 2016-04-26 -> 20160805
2016-08-14 22:37:10 +03:00
Dan Peebles
948b7f23bb
darwin.{xnu, Libc}: 10.9 -> 10.11
...
I can't submit this in smaller units because the various components all
depend on one another during the stdenv bootstrap, so I think this is
the smallest sensible change I can make.
I also removed the symbol-hiding shenanigans in Libsystem. It might mess
up compatibility with 10.9 but I don't really want to support the added
complexity and I see little evidence of anyone else wanting to support
it. If someone cares, we might be able to revive compatibility, but for
now it'll stay like this.
2016-08-14 12:53:33 -04:00
Eric Sagnes
f0fef4defb
wireguard-unstable: 2016-07-22 -> 2016-08-08 ( #17727 )
2016-08-14 10:47:16 +00:00
Robin Gloster
99cb230b47
Merge remote-tracking branch 'upstream/master' into hardened-stdenv
2016-08-14 09:09:20 +00:00
Robin Gloster
8071cafe66
linuxPackages.rtl8812au: fix build
2016-08-14 08:59:55 +00:00
Robin Gloster
2676cf9525
linuxPackages.lttng-modules: fix build
2016-08-14 08:59:19 +00:00
Domen Kožar
a7f8787dbd
Merge pull request #17705 from womfoo/bump/hwdata-0.291
...
hwdata: 0.276 -> 0.291
2016-08-13 17:00:08 +02:00
Franz Pletz
bd4490e277
Merge branch 'master' into hardened-stdenv
2016-08-13 16:59:55 +02:00
Franz Pletz
fa3a35b241
linuxPackages.fusionio-vsl: disable pic hardening (still broken)
2016-08-13 16:55:26 +02:00
Franz Pletz
b2c6d28a1d
linuxPackages.ndiswrapper: disable pic hardening (still broken)
2016-08-13 16:50:43 +02:00
Franz Pletz
9e7d118ea2
linuxPackages.nvidia-x11: disable pic & format hardening
2016-08-13 16:49:42 +02:00
Franz Pletz
5103e70a37
linuxPackages.nvidiabl: disable pic hardening
2016-08-13 16:44:39 +02:00
Franz Pletz
73a9ce2ce3
linuxPackages.psmouse_alps: remove, driver in kernel since 3.9
2016-08-13 16:42:35 +02:00
Franz Pletz
62e6bc0bd9
linuxPackages.prl-tools: disable pic hardening
2016-08-13 16:40:42 +02:00
Franz Pletz
f55fd87c8a
linuxPackages.ixgbevf: disable pic hardening
2016-08-13 16:30:35 +02:00
Franz Pletz
5e085b7fea
linuxPackages.e1000e: disable pic hardening
2016-08-13 16:25:29 +02:00
Franz Pletz
d836b811cb
linuxPackages.cryptodev: 1.6 -> 1.8, disable pic hardening
2016-08-13 16:24:38 +02:00
Franz Pletz
f5c9f99877
linuxPackages.ati_drivers_x11: disable pic & format hardening
2016-08-13 16:06:57 +02:00
Franz Pletz
a8deb8d647
linuxPackages.frandom: disable pic hardening
2016-08-13 16:03:32 +02:00
Franz Pletz
7d9d2d6872
linuxPackages.broadcom_sta: disable pic hardening
2016-08-13 16:02:02 +02:00
Robin Gloster
0f274be2fd
linuxPackages.ena: disable pic
2016-08-13 10:12:07 +00:00
Kranium Gikos Mendoza
1bbcc7e378
hwdata: 0.276 -> 0.291
2016-08-13 10:06:34 +08:00
Luca Bruno
fda17cfd0e
Merge pull request #17703 from womfoo/bump/microcode-intel-20160714
...
microcode-intel: 20150121 -> 20160714
2016-08-12 21:44:34 +01:00
Kranium Gikos Mendoza
050452dd7f
microcode-intel: 20150121 -> 20160714
2016-08-13 03:53:03 +08:00
obadz
b2efe2babd
Revert "linux kernel 4.4: fix race during build"
...
Removes patch. Was fixed upstream.
This reverts commit 4788ec1372
2016-08-12 16:42:25 +01:00
