about summary refs log tree commit diff
path: root/nixpkgs
Commit message (Collapse)AuthorAge
* linux/hardened/patches/5.7: 5.7.17.a -> 5.7.19.aTim Steinbach2021-01-06
| | | | (cherry picked from commit 5fa49dc8b0eb3e8a2548a2ae414d56350a64fac7)
* linux/hardened/patches/5.4: 5.4.60.a -> 5.4.61.aTim Steinbach2021-01-06
| | | | (cherry picked from commit 69274cf2d04543b8f17859abdc06b85e33cbe2f0)
* linux/hardened/patches/4.19: 4.19.141.a -> 4.19.142.aTim Steinbach2021-01-06
| | | | (cherry picked from commit 3b39d531ad22ecae26d72767168e97d92a3bda26)
* linux/hardened/patches/4.14: 4.14.194.a -> 4.14.195.aTim Steinbach2021-01-06
| | | | (cherry picked from commit 5ef4bad431341b3aa360609eac885938802f5a99)
* linux/hardened/patches/5.7: 5.7.16.a -> 5.7.17.aTim Steinbach2021-01-06
| | | | (cherry picked from commit 39adc17e3bc6c41c90a926fdbf19fd4a031b8d48)
* linux/hardened/patches/5.4: 5.4.59.a -> 5.4.60.aTim Steinbach2021-01-06
| | | | (cherry picked from commit 85760a9c86c0f17bb5f824eb20cce2a69e4ca57a)
* linux/hardened/patches/4.19: 4.19.140.a -> 4.19.141.aTim Steinbach2021-01-06
| | | | (cherry picked from commit 3b9e1883461c428fb0df3d63e5d9563e9b9bec0c)
* linux/hardened/patches/4.14: 4.14.193.a -> 4.14.194.aTim Steinbach2021-01-06
| | | | (cherry picked from commit cf65c610a5b69e8c1918541a99f40cd8acec72ee)
* linux/hardened/patches/5.7: 5.7.15.a -> 5.7.16.aTim Steinbach2021-01-06
| | | | (cherry picked from commit 9c5578b08f72f545906f3398780fdfd67db2f35c)
* linux/hardened/patches/5.4: 5.4.58.a -> 5.4.59.aTim Steinbach2021-01-06
| | | | (cherry picked from commit 266521c7d8923d43d85dc874d7bdcb0fa8c00389)
* linux/hardened/patches/4.19: 4.19.139.a -> 4.19.140.aTim Steinbach2021-01-06
| | | | (cherry picked from commit e857d071d3194aedd91494c7df01ad07761fa6b5)
* linux/hardened/patches/5.7: 5.7.11.a -> 5.7.15.aTim Steinbach2021-01-06
| | | | (cherry picked from commit 612c48592d7f6665ee771043910b2592f0215919)
* linux/hardened/patches/5.4: 5.4.54.a -> 5.4.58.aTim Steinbach2021-01-06
| | | | (cherry picked from commit 14bb0a744f4c2bb4a1d7be912b19967fcd23a89e)
* linux/hardened/patches/4.19: 4.19.135.a -> 4.19.139.aTim Steinbach2021-01-06
| | | | (cherry picked from commit 3acf7292853b0e41b3e3489261955b0849644e81)
* linux/hardened/patches/4.14: 4.14.190.a -> 4.14.193.aTim Steinbach2021-01-06
| | | | (cherry picked from commit 6bb6593adf75bda9e98c3abe1619f0478635c644)
* linux/hardened/patches/5.6: removeTim Steinbach2021-01-06
| | | | (cherry picked from commit deb12d397abd533a9a29183ab86cba6ec3a25244)
* linux/hardened/patches/5.7: 5.7.10.a -> 5.7.11.aTim Steinbach2021-01-06
| | | | (cherry picked from commit c55d161ca2f601de28d7797aef71d1e34401c7a6)
* linux/hardened/patches/5.4: 5.4.53.a -> 5.4.54.aTim Steinbach2021-01-06
| | | | (cherry picked from commit 4c789190beb43feade639ee5f5656e31446e471e)
* linux/hardened/patches/4.19: 4.19.134.a -> 4.19.135.aTim Steinbach2021-01-06
| | | | (cherry picked from commit fca98b5da89ef4ef61edd872e3462e7d77fc9b6b)
* linux/hardened/patches/4.14: 4.14.189.a -> 4.14.190.aTim Steinbach2021-01-06
| | | | (cherry picked from commit 43e1e283c6819f261848ece9189dbee9139a050f)
* linux/hardened/patches/5.7: 5.7.9.a -> 5.7.10.aTim Steinbach2021-01-06
| | | | (cherry picked from commit e3973f71b7127de41fe9be87073cde9b49bed159)
* linux/hardened/patches/5.4: 5.4.52.a -> 5.4.53.aTim Steinbach2021-01-06
| | | | (cherry picked from commit 534ea8d3bc330abea497ec334ccc76b2b5fe13f7)
* linux/hardened/patches/4.19: 4.19.133.a -> 4.19.134.aTim Steinbach2021-01-06
| | | | (cherry picked from commit ac0cc4c59c5417754e5c6fe3ebc18251977725d7)
* linux/hardened/patches/4.14: 4.14.188.a -> 4.14.189.aTim Steinbach2021-01-06
| | | | (cherry picked from commit 6808fbf6300e8b87bf047f4ad4b96d47383a3404)
* linux/hardened/patches/5.7: 5.7.8.a -> 5.7.9.aTim Steinbach2021-01-06
| | | | (cherry picked from commit 565e1049dbdb761f94c7d57e534d895a62fb14b8)
* linux/hardened/patches/5.4: 5.4.49.a -> 5.4.52.aTim Steinbach2021-01-06
| | | | (cherry picked from commit 6c1601c430268a89d2e7a93bad157aed65fa7711)
* linux/hardened/patches/4.19: 4.19.132.a -> 4.19.133.aTim Steinbach2021-01-06
| | | | (cherry picked from commit 960ac522fb7a68c2ed464134727646ac09a1e137)
* linux/hardened/patches/5.7: 5.7.7.a -> 5.7.8.aTim Steinbach2021-01-06
| | | | (cherry picked from commit af5accfa96c23a9a649e19321abb5e0ae24c259f)
* linux/hardened/patches/5.4: 5.4.48.a -> 5.4.49.aTim Steinbach2021-01-06
| | | | (cherry picked from commit cda915372781307191bf7e419cb253c4591df355)
* linux/hardened/patches/4.19: 4.19.131.a -> 4.19.132.aTim Steinbach2021-01-06
| | | | (cherry picked from commit 4be3ad84d217bc515eab46c4a9a5f65c46398ea5)
* linux/hardened/patches/4.14: 4.14.187.a -> 4.14.188.aTim Steinbach2021-01-06
| | | | (cherry picked from commit 2371cb620ac1daee8af92068b11d5e476b0337ec)
* linux/hardened/patches/5.7: init at 5.7.7.aTim Steinbach2021-01-06
| | | | (cherry picked from commit 4de40fa9b42826b61202f2a905550ccc18417fc9)
* linux/hardened/patches/4.19: 4.19.129.a -> 4.19.131.aTim Steinbach2021-01-06
| | | | (cherry picked from commit 760c9b1da7dc78f4f6e741525aff0c4333f6adb4)
* linux/hardened/patches/4.14: 4.14.185.a -> 4.14.187.aTim Steinbach2021-01-06
| | | | (cherry picked from commit 0ff4f8095a236fb70c939e0f8a91e2d2327ead70)
* linux/hardened/patches/5.6: 5.6.18.a -> 5.6.19.aTim Steinbach2021-01-06
| | | | (cherry picked from commit 9507dfbe8201340d2603040fdeb0f2f860ec405e)
* linux/hardened/patches/5.4: 5.4.46.a -> 5.4.48.aTim Steinbach2021-01-06
| | | | (cherry picked from commit 34393bcf19e3f3e50571ad7b81fe8eeb636c652e)
* linux/hardened/patches/4.19: 4.19.128.a -> 4.19.129.aTim Steinbach2021-01-06
| | | | (cherry picked from commit d6ea499873f7b14fddd190e213919d1b0c3cd4ec)
* linux/hardened/patches/4.14: 4.14.184.a -> 4.14.185.aTim Steinbach2021-01-06
| | | | (cherry picked from commit 91b3fe57531356627d668c50c3da301fafe09520)
* emacsPackages.melpa-packages: 2020-12-09Alyssa Ross2021-01-06
| | | | (cherry picked from commit f493e6264372fd420a9d72d75136a4564e9aca48)
* emacsPackages.org-packages: 2020-12-09Alyssa Ross2021-01-06
| | | | (cherry picked from commit 33ee2f22c633a82be3c9a72770297698b79ebaab)
* emacsPackages.elpa-packages: 2020-12-09Alyssa Ross2021-01-06
| | | | (cherry picked from commit a43c6fc02596c36e7c4aae062a14f6b1bd655ebf)
* emacsWithPackages: don't tell sub-Emacs about pkgsAlyssa Ross2021-01-06
| | | | | | | | | | | | | | If I'm running an Emacs executable from emacsWithPackages as my main programming environment, and I'm hacking on Emacs, or the Emacs packaging in Nixpkgs, or whatever, I don't want the Emacs packages from the wrapper to show up in the load path of that child Emacs. It results in differing behaviour depending on whether the child Emacs is run from Emacs or from, for example, an external terminal emulator, which is very surprising. To avoid this, pass another environment variable containing the wrapper site-lisp path, and use that value to remove the corresponding entry in EMACSLOADPATH, so it won't be propagated to child Emacsen.
* emacsWithPackages: mutate EMACSLOADPATH correctlyAlyssa Ross2021-01-06
| | | | | | | | | | | | | | | | | | | | | An empty entry in EMACSLOADPATH gets filled with the default value. This is presumably why the wrapper inserted a colon after the entry it added for the dependencies. But this naive approach wasn't always correct. For example, if the user ran emacs with EMACSLOADPATH=foo, the wrapper would insert the default value (by adding the trailing `:') even though the user was trying to expressly opt out of it. To do this correctly, here I've replaced makeWrapper with a bespoke script that will actually parse the EMACSLOADPATH provided in the environment (if given), and insert the wrapper's load path just before the default value. If EMACSLOADPATH is given but contains no default value, we respect that and don't add the wrapped dependencies at all. If no EMACSLOADPATH is given, we insert the wrapped dependencies before the default value, just like before. In this way, the wrapped Emacs should now behave as if the wrapped dependencies were part of Emacs's default load-path value.
* nixos/mailman: add services.mailman.serveAlyssa Ross2021-01-06
| | | | | | Extracted from b478e0043c53964c99cc9a145c155a673af3c7d8 ("nixos/mailman: refactor"), to bring myself closer to current upstream.
* nixos/mailman: add mailman-web userAlyssa Ross2021-01-06
| | | | | | Extracted from b478e0043c53964c99cc9a145c155a673af3c7d8 ("nixos/mailman: refactor"), to bring myself closer to current upstream.
* nixos/uwsgi: add extraArgs optionAlyssa Ross2021-01-06
| | | | I need this to be able to make my uwsgi socket group-readable.
* nixos/mailman: add mta.configurationAlyssa Ross2021-01-06
| | | | | | Extracted from b478e0043c53964c99cc9a145c155a673af3c7d8 ("nixos/mailman: refactor"), to bring myself closer to current upstream.
* spamassassin: 3.4.3 -> 3.4.4Alyssa Ross2021-01-06
|
* nixos/fcgiwrap: don't run as rootAlyssa Ross2021-01-02
| | | | | | | | | | | | Previously, fcgiwrap was run as root by default. This was bad because it meant every CGI script was run as root. Changed to set DynamicUser, so instead of having access to everything, CGI scripts will now by default only have access to things that are world-readable. This will probably break things for users, but since we can't know what they want to allow their CGI scripts access to they'll have to fix that themselves, because it would be irresponsible to leave this defaulting to root.
* nixos/nginx: allow overriding fastcgi paramsAlyssa Ross2021-01-02
| | | | | | | | | | | | | | | | | | | | | | By default in Nginx, if you want to override a single fastcgi_param, you have to override all of them. This is less of a big deal if you're editing the Nginx configuration directly, but when you're generating the Nginx configuration with Nix it can be very annoying to bloat your configuration repeating the default values of FastCGI parameters every time. This patch adds a fastcgiParams option to Nginx locations. If any parameters are set through this, all the default values will be included as well, so only the ones that are changing need to be supplied. There's no way to use fastcgiParams to actually override all parameters if that's what you want, but I think that's a niche use case and it's still possible using extraConfig, which up until now was the only option Nginx allows the fastcgi_param directive in http and server scopes as well as location, but here I only support location. It would be possible to support the others, but I don't think it's worth it. It would be a possible future enhancement if somebody has a need for it.