mirrors/nixpkgs
1
0
Fork 1
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-11-26 07:31:20 +00:00
Code Issues Wiki Activity
65379 commits 228 branches 124 tags 7.2 GiB
Commit graph

65379 commits

This branch
This branch
All branches
Author SHA1 Message Date
aszlig 9bc2f77daa
nixos/tests/chromium: Improve sandbox checking. 
We no longer need have "SUID sandbox" enabled in the chrome://sandbox
status page and we now also check for "You are adequately sandboxed." to
be absolutely sure that we're running with proper sandboxing.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
 2015-07-04 02:31:45 +02:00
aszlig 7e6d6e034d
chromium: Disable setuid sandbox without errors. 
Just silencing the error will not prevent Chromium from trying to start
up the SUID sandbox anyway, thus flooding stderr with:

LaunchProcess: failed to execvp:

After digging a bit in the source code I found out that the SUID sandbox
binary is indeed used, but only for setting oom_score_adj within the
user namespace (as "root"). So let's build the sandbox binary and of
course don't set setuid bit.

These annoying error messages were originally introduced by 0aad4b7 and
I'm deeply sorry for annoying you guys out there with them.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
 2015-07-04 02:31:45 +02:00
aszlig a80437e236
chromium: Remove out-of-tree sandbox derivation. 
Since 0aad4b7, we no longer need to have an external sandbox binary,
because the upstream implementation of the user namespace sandbox no
longer needs an external sandbox binary.

In our implementation of the user namespace sandbox, we (ab)used the
setuid sandbox to run non-setuid and set up user namespaces instead.

Because our implementation is no longer needed, we can safely drop the
external binary entirely.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
 2015-07-04 02:31:44 +02:00
aszlig 97ddd04ca9
chromium: Remove obsolete sandbox_userns_36.patch. 
The file is no longer referenced since 6a8afa4 and thus can be safely
dropped.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
 2015-07-04 02:31:44 +02:00
Arseniy Seroka b152a0b094 Merge pull request #8618 from taku0/firefox-bin-39.0 
firefox-bin: 38.0.5 -> 39.0
 2015-07-04 03:09:03 +03:00
Arseniy Seroka 8efa25b5e3 Merge pull request #8596 from akaWolf/master 
qtcreator: 3.2.1 -> 3.4.2
 2015-07-04 03:08:19 +03:00
taku0 443e9843eb firefox-bin: 38.0.5 -> 39.0 2015-07-04 09:06:35 +09:00
Arseniy Seroka 1fd18a0d86 Merge pull request #8627 from kquick/fix/htmlize-source-location 
htmlize: update source location
 2015-07-04 03:04:43 +03:00
Arseniy Seroka 14ceec7c26 Merge pull request #8616 from lihop/vim-plugins 
vimPlugins: add vim-sleuth and CSApprox
 2015-07-04 02:59:53 +03:00
Arseniy Seroka f71b7f08af Merge pull request #8579 from jraygauthier/jrg/i686_linux_libspotify 
Add support for libspotify on `i686-linux`.
 2015-07-04 02:54:59 +03:00
Vincent Laporte 06efb2e937 chefdk: fix build 2015-07-04 00:39:44 +02:00
Kevin Quick 882f3ad0db htmlize: update source location 2015-07-03 15:33:26 -07:00
Thomas Strobel 91b85236d0 Virtualization: add XEN/KVM related drivers for Windows 2015-07-04 00:14:05 +02:00
Thomas Strobel 7e1be588bf Leveldb: export helper functions of leveldb 2015-07-03 23:04:35 +02:00
Peter Simons b451382c63 Merge pull request #8581 from jraygauthier/jrg/upgrade_ghcjs_source 
Upgraded ghcjs package.
 2015-07-03 20:44:08 +02:00
Kosyrev Serge c1dd5018cc libev: make the url stable 2015-07-03 20:08:31 +03:00
Leroy Hopson b0e6cedf6e vimPlugins: add vim-sleuth 2015-07-04 02:19:57 +12:00
Leroy Hopson a28f0340e1 vimPlugins: add CSApprox 2015-07-04 02:19:57 +12:00
Joachim Schiele 11cd596aea wordpress: language downloads are now reproducible 2015-07-03 13:06:44 +02:00
Pascal Wittmann d5275c70c3 mcabber: update from 0.10.3 to 1.0.0 2015-07-03 10:18:48 +02:00
lethalman 5a2d1fedbc Merge pull request #8615 from kamilchm/albatross 
New GTK theme - Albatross from Shimmer Project
 2015-07-03 09:57:16 +02:00
Edward Tjörnhammar 6257425dab linuxPackages.nvidia_x11_legacy340: fix cr4 references 
Patch was copied from here:
https://devtalk.nvidia.com/default/topic/813458/linux-4-0-rc1-346-47-build-error-_cr4-functions-fix/

Reference to kernel change, also noted in the forum post:
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/arch/x86/include/asm/paravirt.h?id=1e02ce4cccdcb9688386e5b8d2c9fa4660b45389
 2015-07-03 09:32:14 +02:00
Kamil Chmielewski 6db7437a64 New GTK theme - Albatross from Shimmer Project 
http://shimmerproject.org/our-projects/albatross/
 2015-07-03 08:40:40 +02:00
Tobias Geerinckx-Rice 8e16c57424 nox: show trace for evaluation errors 
Backports upstream commit 8900531.
 2015-07-03 04:52:06 +02:00
Tobias Geerinckx-Rice 63041a7ecb kexec-tools: 2.0.9 -> 2.0.10 2015-07-03 04:28:43 +02:00
Tobias Geerinckx-Rice dfdcbb3640 python-packages: prompt_toolkit 0.41 -> 0.42 2015-07-03 04:13:02 +02:00
Tobias Geerinckx-Rice 1869f171fd stress-ng: 0.04.07 -> 0.04.10 2015-07-03 04:08:49 +02:00
Asko Soukka 278287a99b emacs: fix to use \${gettext}/share/locale/locale.alias 2015-07-03 03:18:15 +03:00
Arseniy Seroka c5245300e2 Merge pull request #8587 from matthiasbeyer/update-gpgme 
gpgme: 1.5.4 -> 1.5.5
 2015-07-02 19:44:55 +03:00
William A. Kennington III 7735b2e4c5 udisks: 2.1.4 -> 2.1.6 2015-07-02 09:05:15 -07:00
Pascal Wittmann 8af3eab207 Merge pull request #8601 from ts468/upstream.pam_mount 
pam_mount: version update: 2.14 -> 2.15
 2015-07-02 17:43:04 +02:00
Thomas Strobel 31ba3ab30d pam_mount: version update: 2.14 -> 2.15 2015-07-02 16:49:35 +02:00
Thomas Strobel 649697ddcf Xen: add XEN 4.5.1 2015-07-02 16:37:03 +02:00
Thomas Strobel 6bd694321d Xen: enable Spice/QXL + add libhvm + minor fixes 2015-07-02 16:33:01 +02:00
Thomas Strobel 8f911263e9 Xen Dom0: add dnsmasq to xen-bridge. 2015-07-02 16:27:40 +02:00
Pascal Wittmann a5360c5b6e libbladeRF: update from 1.1.0 to 1.4.0 2015-07-02 16:25:24 +02:00
Eelco Dolstra f3e2b31297 blender: Update to 2.75 
(cherry picked from commit 36779d90e2b7e93ec5387cc5b5d106a037eb3d11)
 2015-07-02 15:36:46 +02:00
Eelco Dolstra 24d922ec3a openimageio: Update to 1.4.16 and fix name 
(cherry picked from commit 17994d9e54448d71246f1221b188118fa7653ff7)
 2015-07-02 15:36:42 +02:00
Eelco Dolstra 05baf485f6 ilmbase, openexr: Use fetchurl 
Also, enable parallel building.

(cherry picked from commit 6c06d7467edea0a5163aeb53f72750abcb044bbe)
 2015-07-02 15:36:37 +02:00
aszlig b65d351c30
duperemove: Update from 0.09.beta2 to 0.09.4. 
Also switches to fetchFromGitHub to remove the need to depend on Git for
fetching the source tarball.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
 2015-07-02 12:28:26 +02:00
Pascal Wittmann 27e0488e11 Merge pull request #8421 from travisbhartwell/update/atom 
atom: 0.187.0 -> 1.0.0
 2015-07-02 11:37:33 +02:00
Alexander Flatter 60c33c16a0 nodejs: Don't apply no-darwin-cflags 
The no-darwin-cflags patch does not apply cleanly anymore, but
apparently it's also not necessary.
 2015-07-02 11:11:51 +02:00
Arseniy Seroka afa1f5ba22 Merge pull request #8586 from vbgl/ocaml-updates 
Ocaml package updates
 2015-07-02 12:06:29 +03:00
William A. Kennington III b21fd5d066 nixos/postgresql: Fix initdb for existing, empty postgres partitions 2015-07-02 00:08:02 -07:00
Artjom Vejsel 20dadbe525 qtcreator: 3.2.1 -> 3.4.2 2015-07-02 09:08:13 +03:00
William A. Kennington III 54022375eb zfs_git: 2015-06-22 -> 2015-07-01 2015-07-01 22:52:09 -07:00
William A. Kennington III f6f9b9574d zfs: 0.6.4.1 -> 0.6.4.2 2015-07-01 22:50:49 -07:00
William A. Kennington III ca5c1e4187 spl_git: 2015-06-10 -> 2015-06-29 2015-07-01 22:49:36 -07:00
William A. Kennington III 4fc07740c6 spl: 0.6.4.1 -> 0.6.4.2 2015-07-01 22:48:21 -07:00
Tobias Geerinckx-Rice 1ea70323d6 mcelog: 120 -> 121 2015-07-02 03:35:35 +02:00