about summary refs log tree commit diff
path: root/pkgs/os-specific
diff options
context:
space:
mode:
authorJoachim Fasting <joachifm@fastmail.fm>2016-05-14 05:05:08 +0200
committerJoachim Fasting <joachifm@fastmail.fm>2016-05-14 05:15:35 +0200
commit6194e9d801d31d6241deb5c6dc534975887f143d (patch)
tree735e1171433cee77dafafce2dd451a228720dddf /pkgs/os-specific
parentcd5dd9f82e141a4d7f570bf483ee5e278b188480 (diff)
downloadnixlib-6194e9d801d31d6241deb5c6dc534975887f143d.tar
nixlib-6194e9d801d31d6241deb5c6dc534975887f143d.tar.gz
nixlib-6194e9d801d31d6241deb5c6dc534975887f143d.tar.bz2
nixlib-6194e9d801d31d6241deb5c6dc534975887f143d.tar.lz
nixlib-6194e9d801d31d6241deb5c6dc534975887f143d.tar.xz
nixlib-6194e9d801d31d6241deb5c6dc534975887f143d.tar.zst
nixlib-6194e9d801d31d6241deb5c6dc534975887f143d.zip
kernelPatches.grsecurity: 4.5.4-201605122039 -> 4.5.4-201605131918
Also revert to using the grsecurity-scrape mirror; relying on upstream
just isn't viable. Lately, updates have been so frequent that a new
version is released before Hydra even gets around to building the
previous one.
Diffstat (limited to 'pkgs/os-specific')
-rw-r--r--pkgs/os-specific/linux/kernel/patches.nix9
1 files changed, 6 insertions, 3 deletions
diff --git a/pkgs/os-specific/linux/kernel/patches.nix b/pkgs/os-specific/linux/kernel/patches.nix
index 2fa0b561a15e..efa3cb2eb864 100644
--- a/pkgs/os-specific/linux/kernel/patches.nix
+++ b/pkgs/os-specific/linux/kernel/patches.nix
@@ -22,8 +22,11 @@ let
     assert kversion == kernel.version;
     { name = "grsecurity-${grversion}-${kversion}";
       inherit grversion kernel patches kversion revision;
+      # When updating versions/hashes, ALWAYS use the official version; we use
+      # this mirror only because upstream removes sources files immediately upon
+      # releasing a new version ...
       patch = fetchurl {
-        url = "https://grsecurity.net/${branch}/grsecurity-${grversion}-${kversion}-${revision}.patch";
+        url = "https://raw.githubusercontent.com/slashbeast/grsecurity-scrape/master/test/grsecurity-${grversion}-${kversion}-${revision}.patch";
         inherit sha256;
       };
       features.grsecurity = true;
@@ -106,8 +109,8 @@ rec {
     { kernel    = pkgs.grsecurity_base_linux_4_5;
       patches   = [ grsecurity_fix_path_4_5 ];
       kversion  = "4.5.4";
-      revision  = "201605122039";
-      sha256    = "10jcwz9lxb4w2p0g6mjsq515s3p0m81rr1a9mw0hqwvm23dba3fs";
+      revision  = "201605131918";
+      sha256    = "0f5s8lj6zc4jp2cpxm7r891px3dmb6m3ximfigwq809yydg5aimv";
     };
 
   grsecurity_latest = grsecurity_4_5;