summary refs log tree commit diff
path: root/pkgs/os-specific
Commit message (Collapse)AuthorAge
* Merge branch 'staging'Thomas Tuegel2016-10-06
|\
| * Merge branch 'master' into stagingVladimír Čunát2016-10-05
| |\
| * \ Merge branch 'kde-5' into stagingThomas Tuegel2016-10-04
| |\ \
| * | | util-linux: fixup patch hash from grandparent mergeVladimír Čunát2016-10-03
| | | | | | | | | | | | | | | | And name the file, too.
| * | | Merge pull request #19175 from Mic92/util-linuxJörg Thalheim2016-10-03
| |\ \ \ | | | | | | | | | | util-linux: workaround CVE-2016-2779
| | * | | util-linux: workaround CVE-2016-2779Jörg Thalheim2016-10-03
| | | | | | | | | | | | | | | | | | | | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2779
| * | | | Merge pull request #19199 from wizeman/u/fix-help2man-hashJörg Thalheim2016-10-03
| |\ \ \ \ | | | | | | | | | | | | help2man: fix hash
| * \ \ \ \ Merge remote-tracking branch 'upstream/master' into stagingTuomas Tynkkynen2016-10-02
| |\ \ \ \ \
| * \ \ \ \ \ Merge remote-tracking branch 'origin/master' into stagingEelco Dolstra2016-09-29
| |\ \ \ \ \ \
| * \ \ \ \ \ \ Merge branch 'master' into stagingVladimír Čunát2016-09-28
| |\ \ \ \ \ \ \
| * | | | | | | | libsepol: temporary fixup after flex security updateVladimír Čunát2016-09-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | /cc #18909.
| * | | | | | | | Merge branch 'master' into stagingVladimír Čunát2016-09-24
| |\ \ \ \ \ \ \ \
| * \ \ \ \ \ \ \ \ Merge remote-tracking branch 'origin/master' into stagingEelco Dolstra2016-09-20
| |\ \ \ \ \ \ \ \ \
| * \ \ \ \ \ \ \ \ \ Merge #18327: gcc darwin fixesVladimír Čunát2016-09-17
| |\ \ \ \ \ \ \ \ \ \
| | * | | | | | | | | | gcc: use special native system headers for darwinMatthew Bauer2016-09-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Darwin systems need to be able to find CoreFoundation headers as well as libc headers. Somehow, gcc doesn't accept any "framework" parameters that would normally be used to include CoreFoundation in this situation. HACK: Instead, this adds a derivation that combines the two. The result works but probably not a good long term solution. ALTERNATIVES: Maybe sending patches in to GCC to allow "native-system-framework" configure flag to get this found.
| * | | | | | | | | | | Merge branch 'master' into stagingVladimír Čunát2016-09-17
| |\ \ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | | | darwin.libunwind: fix incorrect sha256Daiderd Jordan2016-09-14
| | | | | | | | | | | | |
| * | | | | | | | | | | | apple-source-releases: upgrade a bunch of stuffDan Peebles2016-09-12
| | | | | | | | | | | | |
| * | | | | | | | | | | | stdenv-darwin: upgrade a couple more constituentsDan Peebles2016-09-12
| | | | | | | | | | | | |
| * | | | | | | | | | | | stdenv-darwin: upgrade a few more thingsDan Peebles2016-09-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It's a long build and generally painful to split into smaller commits, so I apologize for lumping many changes into one commit but this is far easier. There are still several outdated parts of the darwin stdenv but these changes should bring us closer to the goal. Fixes #18461
* | | | | | | | | | | | | Merge pull request #19278 from anderspapitto/localEelco Dolstra2016-10-06
|\ \ \ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | perf: add dependency on libaudit
| * | | | | | | | | | | | | perf: add dependency on libauditAnders Papitto2016-10-05
| | |_|_|_|/ / / / / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | the `trace` subcommand of perf is only enabled when libaudit is available at compile time
* | | | | | | | | | | | | Merge pull request #19265 from Mic92/rtkitJörg Thalheim2016-10-06
|\ \ \ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | rtkit: apply security relevant patch
| * | | | | | | | | | | | | rtkit: *security* Pass uid of caller to polkitJörg Thalheim2016-10-05
| | |_|_|_|_|_|_|_|_|_|_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Otherwise, we force polkit to look up the uid itself in /proc, which is racy if they execve() a setuid binary.
* | | | | | | | | | | | | Merge pull request #19251 from groxxda/patch-2Eelco Dolstra2016-10-05
|\ \ \ \ \ \ \ \ \ \ \ \ \ | |/ / / / / / / / / / / / |/| | | | | | | | | | | | kernel: Disable RT_GROUP_SCHED
| * | | | | | | | | | | | kernel: Disable RT_GROUP_SCHEDAlexander Ried2016-10-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Follow systemd recommendation https://github.com/systemd/systemd/blob/fd74fa791f95433ac52520764b67e6fb4bda2c0e/README#L96-L103
* | | | | | | | | | | | | rtkit: add patch from debian to remove ControlGroup stanzaAlexander Ried2016-10-05
|/ / / / / / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | fixes log clutter: systemd[1]: [/nix/store/....-rtkit-0.11/etc/systemd/system/rtkit-daemon.service:32] Unknown lvalue 'ControlGroup' in section 'Service'
* | | | | | | | | | | / Revert "Revert "Linux 4.8""Shea Levy2016-10-04
| |_|_|_|_|_|_|_|_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Now featuring @aszlig's modinst_arg_list_too_long patch. This reverts commit 43bedb970d7518794f8e82ffffce23952c06083f. Fixes #19213
* | | | | | | | | | | Revert "Linux 4.8"Shea Levy2016-10-03
| |_|_|_|_|_|_|_|/ / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit e4958d54b13909281ee01ef241abab5d955f6f75.
* | | | | | | | | | jool: 3.4.5 -> 3.5.0Franz Pletz2016-10-03
| | | | | | | | | |
* | | | | | | | | | Linux 4.8Shea Levy2016-10-03
| | | | | | | | | |
* | | | | | | | | | wireguard: 2016-08-08 -> 2016-10-01Eric Sagnes2016-10-03
| | | | | | | | | |
* | | | | | | | | | grsecurity: revamp nixos kernel configJoachim Fasting2016-10-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Cleanup: - Restructure & add some commentary - Remove redundant option specs given the auto config constraints (some are left in for documentation purposes) Changes: - GRKERNSEC_CONFIG_VIRT_HOST -> GUEST The former deselects paravirtualization and friends - PAX_LATENT_ENTROPY n -> y (implied by auto) - GRKERNSEC_ACL_HIDEKERN y -> n Possibly useless with redistribution
* | | | | | | | | | grsecurity: make GRKERNSEC y and PAX y implicitJoachim Fasting2016-10-02
| |_|_|_|_|_|_|/ / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | These options should always be specified. Note, an implication of this change is that not specifying any grsec/PaX options results in a build failure.
* | | | | | | | | treewide: Fix more lib.optional misusesTuomas Tynkkynen2016-10-02
| | | | | | | | |
* | | | | | | | | Remove redundant -DCMAKE_BUILD_TYPE=Release flagsAneesh Agrawal2016-10-01
| |_|_|_|_|_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Since commit 183d05a0 in 2012, this is the default. fixes #18000
* | | | | | | | grsecurity: 4.7.5-201609261522 -> 4.7.6-201609301918Joachim Fasting2016-10-01
| | | | | | | |
* | | | | | | | linux_4_7: 4.7.5 -> 4.7.6Joachim Fasting2016-10-01
| | | | | | | |
* | | | | | | | linux: 4.4.22 -> 4.4.23Eelco Dolstra2016-09-30
| | | | | | | |
* | | | | | | | systemd: Apply various upstream bug fixesEelco Dolstra2016-09-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This includes the fix for the assertion failure in https://github.com/systemd/systemd/issues/4234.
* | | | | | | | btfs: 2.11 -> 2.12rnhmjoj2016-09-30
| | | | | | | |
* | | | | | | | pam_usb: Fix evaluationEelco Dolstra2016-09-29
| |_|_|_|_|_|/ |/| | | | | |
* | | | | | | Move useSetUID to pam_usb, the only place where it's usedEelco Dolstra2016-09-29
| | | | | | |
* | | | | | | rtl8812au: 4.2.2-1 -> 4.3.20Yochai2016-09-29
| | | | | | |
* | | | | | | linux-3.10: fix build by upstream patchGraham Christensen2016-09-28
| |_|_|_|_|/ |/| | | | |
* | | | | | iproute2: fix bash completionAlexander Ried2016-09-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | apparently bash expects only files in its completion folder and not subfolders.
* | | | | | grsecurity: 4.7.4-201609211951 -> 4.7.5-201609261522Joachim Fasting2016-09-27
| | | | | |
* | | | | | Merge pull request #18943 from Mic92/busyboxzimbatm2016-09-26
|\ \ \ \ \ \ | | | | | | | | | | | | | | busybox: 1.23.2 -> 1.24.2
| * | | | | | busybox: 1.23.2 -> 1.24.2Jörg Thalheim2016-09-25
| |/ / / / / | | | | | | | | | | | | | | | | | | fixes https://lwn.net/Vulnerabilities/696815/
* | | | | | Do not use top-level buildPythonPackage or buildPythonApplicationFrederik Rietdijk2016-09-26
| | | | | | | | | | | | | | | | | | | | | | | | but instead use the one in pythonPackages.