summary refs log tree commit diff
path: root/pkgs/tools/security
Commit message (Collapse)AuthorAge
* nitrokey-app: 0.5.1 -> 0.6.3 (#24219)Kai2017-04-14
| | | | | | * nitrokey-app: 0.5.1 -> 0.6.3 * Fix (native)buildInputs and refactor
* Merge pull request #24797 from nixy/pass/coreutils-sb-patchDaiderd Jordan2017-04-13
|\ | | | | pass: fix clipboard functionality for darwin
| * pass: Fix clipboard functionalityAndrew R. M2017-04-10
| | | | | | | | | | | | | | Add the patch that was removed that allows pass's clip() function to work with single binary coreutils. This version of the patch is also applied to darwin.sh, so this should fix the clipboard functionality in darwin as well.
* | Merge pull request #24838 from matthewbauer/ibtoolDaniel Peebles2017-04-12
|\ \ | |/ |/| pinentry_mac: use xcbuild
| * pinentry_mac: use precompiled .nib'sMatthew Bauer2017-04-12
| | | | | | | | | | | | sadly, xib2nib hasn't been working like i though. I've just precompiled into our modified pinentry_mac. Eventually we can get this fixed but it's not as easy as first thought.
| * pinentry_mac: switch to pure versionMatthew Bauer2017-04-12
| | | | | | | | Fixes #24734
| * pinentry_mac: use xcbuildMatthew Bauer2017-04-09
| |
* | gnupg21: 2.1.19 -> 2.1.20Lancelot SIX2017-04-05
| | | | | | | | | | See http://lists.gnu.org/archive/html/info-gnu/2017-04/msg00002.html for release information
* | gnupg: Give the 1compat package a higher priorityEelco Dolstra2017-04-04
|/ | | | This resolves collision warnings with the regular gnupg packages.
* gnupg*: Improve the meta setMichael Weiss2017-03-28
| | | | And use version from gnupg21 for gnupg1compat.
* signing-party: Add 4 missing man pages + dep fixMichael Weiss2017-03-28
| | | | | | | | | | | | The manual pages for the following 4 tools where still missing: - gpgsigs - keyanalyze - pgpring - process_keys The gpgdir script needs the gpg binary. The 19 tools are licensed under various licenses.
* treewide: purge maintainers.urkudVladimír Čunát2017-03-27
| | | | | It's sad, but he's been inactive for the last five years. Keeping such people in meta.maintainers is counter-productive.
* signing-party: Fix deps and include all toolsMichael Weiss2017-03-26
| | | | | | | | | | | | | | | | | | | | Additional tools: - gpg-key2latex - gpgdir - gpgwrap This module is really hacky and the dependencies are very messy... :o However I tried my best at testing all 19 individual tools and they should (hopefully) all work now (apart from sendmail which can be provided by multiple packages) :) The code is very redundant (sorry) but imho it's easier to read and maintain it that way. TODO: There are some additional manual pages that could be included (I'm too exhausted for that atm...). And there might be a lot of stuff that could be improved in the future.
* torbrowser: reduce risk of stale Nix store referencesJoachim Fasting2017-03-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch restructures the expression and wrapper to minimize Nix store references captured by the user's state directory. The previous version would write lots of references to the Nix store into the user's state directory, resulting in synchronization issues between the Store and the local state directory. At best, this would cause TBB to stop working when the version used to instantiate the local state was garbage collected; at worst, a user would continue to use the old version even after an upgrade. To solve the issue, hard-code as much as possible at the Store side and minimize the amount of stuff being copied into the local state dir. Currently, only a few files generated at firefox startup and fontconfig cache files end up capturing store paths; these files are simply removed upon every startup. Otherwise, no capture should occur and the user should always be using the TBB associated with the tor-browser wrapper script. To check for stale Store paths, do `grep -Ero '/nix/store/[^/]+' ~/.local/share/tor-browser` This command should *never* return any other store path than the one associated with the current tor-browser wrapper script, even after an update (assuming you've run tor-browser at least once after updating). Deviations from this general rule are considered bugs from now on. Note that no attempt has been made to support pluggable transports; they are still broken with this patch (to be fixed in a follow-up patch). User visible changes: - Wrapper retains only environment variables required for TBB to work - pulseaudioSupport can be toggled independently of mediaSupport (the latter weakly implies the former). - Store local state under $TBB_HOME. Defaults to $XDG_DATA_HOME/tor-browser - Stop obnoxious first-run stuff (NoScript redirect, in particular) - Set desktop item GenericName to Web Browser Some minor enhancements: - Disable Hydra builds - Specify system -> source mapping to make it easier to extend supported platforms.
* Merge pull request #23863 from plumps/add-vulnixFrederik Rietdijk2017-03-24
|\ | | | | vulnix: init at 1.2.2
| * pythonPackages.BTrees: 4.1.4 -> 4.3.1Jörg Thalheim2017-03-24
| |
| * initial release: vulnixMaksim Bronsky2017-03-15
| |
* | Revert "gpgme: Drop multiple outputs (dev and info)"Michael Weiss2017-03-21
| | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit 872770286d04cadb9816cd1665d3d5f17adce456. This will fix fwknop as well (should have done it like this in the first place, where was my mind...). Conclusion: Did something stupid... :o - I am *so incredibly sorry*, will be way more careful (was already careful, but apparently not enought...) next time and use nox. Sorry @everyone and thanks @calvertvl for noticing this.
* | fwknop: init at 2.6.9Michael Weiss2017-03-21
| | | | | | | | | | fwknop stands for the "FireWall KNock OPerator", and implements an authorization scheme called Single Packet Authorization (SPA).
* | Merge pull request #23715 from risicle/moz-sopsMichael Raskin2017-03-18
|\ \ | | | | | | Add Mozilla sops package
| * | sops: init at version 2.0.8Robert Scott2017-03-10
| | |
* | | Merge branch 'master' into stagingVladimír Čunát2017-03-18
|\ \ \ | | | | | | | | | | | | Nontrivial rebuilds from master, again :-/
| * | | keybase: 20170209 -> 1.0.20Peter Hoeg2017-03-16
| | |/ | |/|
* | | Merge remote-tracking branch 'upstream/master' into stagingTuomas Tynkkynen2017-03-14
|\| | | | | | | | | | | | | | Conflicts: pkgs/development/libraries/qt-5/5.7/qtbase/default.nix
| * | Merge pull request #23653 from LnL7/darwin-crunchDaiderd Jordan2017-03-10
| |\ \ | | |/ | |/| crunch: enable darwin build
| | * crunch: enable darwin buildDaiderd Jordan2017-03-09
| | |
| * | john: Disable parallel buildTuomas Tynkkynen2017-03-10
| | | | | | | | | | | | http://hydra.nixos.org/build/49940032/nixlog/1/raw
* | | Merge branch 'master' into stagingVladimír Čunát2017-03-09
|\| | | | | | | | | | | ... to fix an evaluation problem in dogecoin.
| * | Merge pull request #23351 from ndowens/tpm-quote-toolsJörg Thalheim2017-03-09
| |\ \ | | | | | | | | tpm-quote-tools: 1.0.2 -> 1.0.3
| | * | tpm-quote-tools: 1.0.2 -> 1.0.3ndowens2017-03-02
| | | | | | | | | | | | | | | | tpm-quote-tools: Fixed library issue
| * | | torbrowser: 6.5 -> 6.5.1Joachim Fasting2017-03-08
| | |/ | |/|
* | | Merge branch 'master' into stagingVladimír Čunát2017-03-07
|\| |
| * | softhsm: 2.1.0 -> 2.2.0Michiel Leenaars2017-03-07
| | |
| * | opensc: remove obsolete DESTDIR patchBenno Fünfstück2017-03-05
| | | | | | | | | | | | | | | | | | This patch was actively causing harm, because it lead to a "double prefix" issue where the etc files were installed into $out/$out/etc instead of just $out/etc.
| * | sha1collisiondetection: init at 1.0.1Michiel Leenaars2017-03-05
| | | | | | | | | | | | Closes https://github.com/NixOS/nixpkgs/pull/23114
* | | Merge pull request #23386 from lsix/update_gnupg21Graham Christensen2017-03-06
|\ \ \ | |/ / |/| | gnupg21: 2.1.18 -> 2.1.19
| * | gnupg21: 2.1.18 -> 2.1.19Lancelot SIX2017-03-02
| | | | | | | | | | | | | | | See http://lists.gnu.org/archive/html/info-gnu/2017-03/msg00000.html for release information
* | | tor: split out geoip dataJoachim Fasting2017-03-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Saves about 5.2 MiB. To use geoip, add something like ``` GeoIPFile ${tor.geoip}/share/tor/geoip GeoIPv6File ${tor.geoip}/share/tor/geoip6 ``` to torrc
* | | tor: 0.2.9.9 -> 0.2.9.10Joachim Fasting2017-03-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The 0.2.9 series is now a long-term support release, which will receive backported security fixes until at least 2020. tor should now build against libressl, as in ```nix tor.override { openssl = libressl; } ``` Also re-enable the test-suite; works fine on my end.
* | | rhash: sha1 -> sha256Joachim Fasting2017-03-01
| |/ |/|
* | haka: replace sha1 with sha256Jörg Thalheim2017-02-28
| |
* | pinentry_qt5: build with C++11 for Qt 5.7Thomas Tuegel2017-02-28
|/
* gst-plugins-base: align attrname with pkgnameBjørn Forsman2017-02-27
|
* gst-plugins-good: align attrname with pkgnameBjørn Forsman2017-02-27
|
* gst-ffmpeg: align attrname with pkgnameBjørn Forsman2017-02-27
|
* pass: refactor, fix completions installFranz Pletz2017-02-26
| | | | cc #23223
* pass: 1.6.5 -> 1.7Franz Pletz2017-02-26
|
* Remove kde4.polkit_kde_agentThomas Tuegel2017-02-24
| | | | | - Already updated to KDE 5 in Nixpkgs - Not useful without the KDE 4 desktop
* Remove kde4.ksshaskpassThomas Tuegel2017-02-24
| | | | | - Already updated to KDE 5 in Nixpkgs - Not useful without the KDE 4 desktop
* gnupg21: Fix scdaemon for usb smartcards (#22891)Daniel Fullmer2017-02-20
| | | | | | | | | | | The use of smartcard functionality for yubikeys (and presumably other usb smartcards) was broken in gnupg 2.1.18. This has apparently already been fixed in gnupg master, and debian backports the included patches for 2.1.18. See also: https://bugs.gnupg.org/gnupg/issue2933 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=852702 https://github.com/NixOS/nixpkgs/pull/21991
generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-07-05 00:36:09 +0000