Bjørn Forsman
2ad0a84751
Revert "openssh: Use the default privilege separation dir (/var/empty)"
...
This reverts commit a927709a35
because it
doesn't build:
$ nix-build -A openssh
...
mkdir /nix/store/yl2xap8n1by3dqxgc4rmrc4s753676a3-openssh-7.2p2/libexec
(umask 022 ; ./mkinstalldirs /var/empty)
mkdir /var
mkdir: cannot create directory '/var': Permission denied
mkdir /var/empty
mkdir: cannot create directory '/var/empty': No such file or directory
make: *** [Makefile:304: install-files] Error 1
builder for ‘/nix/store/ifygp4mqpv7l8cgp0njp8w7lmrl6brpp-openssh-7.2p2.drv’ failed with exit code 2
2016-07-15 12:42:37 +02:00
Frederik Rietdijk
81d798bc36
Merge pull request #16463 from FRidh/secp
...
secp256k1: init (native lib, and python ffi bindings at 0.12.1)
2016-07-15 12:23:20 +02:00
Rickard Nilsson
a927709a35
openssh: Use the default privilege separation dir (/var/empty)
...
If running NixOS inside a container where the host's root-owned files
and directories have been mapped to some other uid (like nobody), the
ssh daemon fails to start, producing this error message:
fatal: /nix/store/...-openssh-7.2p2/empty must be owned by root and not group or world-writable.
The reason for this is that when openssh is built, we explicitly set
`--with-privsep-path=$out/empty`. This commit removes that flag which
causes the default directory /var/empty to be used instead. Since NixOS'
activation script correctly sets up that directory, the ssh daemon now
also works within containers that have a non-root-owned nix store.
2016-07-14 20:54:06 +02:00
Arseniy Seroka
4060133812
Merge pull request #16956 from zimbatm/zerotier-1.1.12
...
zerotierone: 1.1.6 -> 1.1.12
2016-07-14 22:20:18 +04:00
Tobias Geerinckx-Rice
93d0a4d311
Merge pull request #16962 from womfoo/bump/stress-ng-0.06.11
...
stress-ng: 0.06.01 -> 0.06.11
2016-07-14 19:41:05 +02:00
Kranium Gikos Mendoza
121a8c0646
stress-ng: 0.06.01 -> 0.06.11
2016-07-15 00:06:54 +08:00
Kranium Gikos Mendoza
9aee153f2b
zerofree: 1.0.3 -> 1.0.4
2016-07-14 15:43:09 +02:00
zimbatm
dc6306a69d
zerotierone: 1.1.6 -> 1.1.12
2016-07-14 14:02:54 +01:00
Vladimír Čunát
1b5ac05845
Merge branch 'staging'
...
Includes security fixes in gd and libarchive.
2016-07-14 15:51:28 +02:00
Ioannis Koutras
d861911263
ocproxy: init at 1.50
2016-07-13 17:15:23 +03:00
Gabriel Ebner
70e2438530
Merge pull request #16913 from womfoo/init/mc-4.8.17
...
mc: 4.8.16 -> 4.8.17
2016-07-13 13:44:13 +02:00
Robert Helgesson
c9b9619636
nethogs: 0.8.1 -> 0.8.5
2016-07-13 13:17:24 +02:00
Kranium Gikos Mendoza
12effae5b6
mc: 4.8.16 -> 4.8.17
2016-07-13 18:52:31 +08:00
Arseniy Seroka
a7f87bd518
Merge pull request #16904 from womfoo/fix-bump/smbldaptools-0.9.11
...
smbldaptools: 0.9.10 -> 0.9.11
2016-07-13 14:52:07 +04:00
Kranium Gikos Mendoza
d5e70a2adc
smbldaptools: 0.9.10 -> 0.9.11
2016-07-13 09:01:25 +08:00
Vladimír Čunát
40785f0dac
Merge branch 'master' into staging
...
Hydra nixpkgs: ?compare=1282763
2016-07-12 22:00:10 +02:00
joachifm
3df7f3cbc3
Merge pull request #16831 from womfoo/fix-bump/gtkgnutella-1.1.9
...
gtk-gnutella: fix build and 1.1.5 -> 1.1.9
2016-07-12 16:21:36 +02:00
joachifm
7135dfd541
Merge pull request #16836 from brainrape/update-youtube-dl
...
youtube-dl: 2016.07.03.1 -> 2016.07.09.2
2016-07-12 16:21:26 +02:00
joachifm
03a7fa9104
Merge pull request #16840 from womfoo/bump/leatherman-0.7.5-facter-3.1.8
...
Bump leatherman: 0.7.0 -> 0.7.5 and sole dependency facter 3.1.6 -> 3.1.8
2016-07-12 16:20:51 +02:00
joachifm
7a54a71c9e
Merge pull request #16808 from 4z3/urlwatch
...
urlwatch: 2.1 -> 2.2
2016-07-12 16:20:17 +02:00
Gabriel Ebner
51e1b2508c
Merge pull request #16878 from womfoo/bump/siege-4.0.2
...
siege: 4.0.1 -> 4.0.2
2016-07-12 08:23:15 +02:00
Kranium Gikos Mendoza
e54223e8bb
siege: 4.0.1 -> 4.0.2
2016-07-12 13:31:31 +08:00
Scott Stevenson
8c81c234d3
rcm: 1.2.3 -> 1.3.0 ( #16847 )
2016-07-11 18:11:31 +02:00
Eric Sagnes
1349cd4e8d
fcitx: refactor ( #16858 )
2016-07-11 17:50:22 +02:00
Domen Kožar
5789f5875f
nix-repl: 2015-09-07 -> 2016-02-28
2016-07-11 14:00:28 +02:00
Gabriel Ebner
ad41b8fa19
mu: fix build of webkit support and re-enable it
2016-07-11 10:37:31 +02:00
Jookia
ba2232f1f2
srelay: init at 0.4.8b6 ( #16833 )
2016-07-11 03:41:02 +02:00
Kranium Gikos Mendoza
356b3ae546
facter: 3.1.6 -> 3.1.8
2016-07-10 23:37:05 +08:00
Márton Boros
129c17b222
youtube-dl: 2016.07.03.1 -> 2016.07.09.2
2016-07-10 12:58:10 +02:00
Carl Sverre
0e6fbf83f8
sift: fix hydra build fail ( #16820 )
...
For some reason I haven't been able to figure out, sift does not build on OSX.
I think it is because sift uses cgo for some of its functionality which you can
see here:
https://github.com/svent/sift/blob/master/matching_cgo.go#L23
The error which hydra found (and is reproducible on OSX) can be seen here:
https://hydra.nixos.org/build/37169149
Ideally I would like to get sift building on OSX, however my nix-fu is weak.
Any suggestions are welcome. In the meantime I would like to get sift into one
of the release channels for Linux where it works fine.
2016-07-10 11:17:47 +02:00
Franz Pletz
bdf4c0d21f
ntp: 4.2.8p6 -> 4.2.8p8 (security)
...
Fixes CVE-2016-4953, CVE-2016-4954, CVE-2016-4955, CVE-2016-4956.
2016-07-10 10:48:11 +02:00
Franz Pletz
033e593a4f
dnsmasq: 2.75 -> 2.76 (security)
...
Fixes CVE-2015-8899.
2016-07-10 10:48:10 +02:00
Franz Pletz
b8ecb949e6
haproxy: 1.6.5 -> 1.6.6 (security)
...
Fixes at least CVE-2016-5360.
2016-07-10 10:46:22 +02:00
Franz Pletz
f1f6dc9b87
shadowsocks-libev: polarssl is now called mbedtls
2016-07-10 10:26:14 +02:00
Kranium Gikos Mendoza
f854c7d4f4
gtk-gnutella: 1.1.5 -> 1.1.9
2016-07-10 11:21:28 +08:00
Robert Helgesson
18a91ddfb6
cloc: 1.68 -> 1.70
2016-07-09 22:51:12 +02:00
Robert Helgesson
8a82798f97
autorandr: avoid use of xxd
...
Use the Python fallback instead of bringing in a dependency on Vim.
2016-07-09 22:40:34 +02:00
Graham Christensen
7bd2052436
autorandr: 4f5e2401ef -> 20150127
...
wertarbyte has allowed his project to languish, and phillipberdt
has taken it over and is merging pull requests
2016-07-09 22:19:32 +02:00
Alexey Shmalko
a5ee403f5b
alarm-clock-applet: use default method for propagating gstreamer ( #16786 )
2016-07-09 18:36:04 +02:00
Vladimír Čunát
95a9fa0ba0
Merge branch 'master' into staging
2016-07-09 16:49:48 +02:00
Daiderd Jordan
b7c134358d
coreutils: use symlinks instead of shell wrapper
2016-07-09 16:47:54 +02:00
Matthias Beyer
340a5d6fbf
openvpn: 2.3.10 -> 2.3.11
...
Taken from #15856 .
2016-07-09 15:04:55 +02:00
Ram Kromberg
781cd33f3b
glmark2: 2014.03 -> 2015-06-11 ( #16812 )
2016-07-09 14:50:24 +02:00
Miguel Madrid
57e1a6c48d
traceroute: 2.0.21 -> 2.1.0 ( #16809 )
2016-07-09 14:40:14 +02:00
Robert Helgesson
02600dacf8
brasero: depend on hicolor_icon_theme
...
This avoids conflicts on `share/icons/hicolor/icon-theme.cache`.
2016-07-09 13:04:32 +02:00
tv
93b246287b
urlwatch: 2.1 -> 2.2
2016-07-09 12:16:30 +02:00
Tobias Geerinckx-Rice
599cf0fe50
zstd: 0.7.2 -> 0.7.3
...
New:
- compression format specification zstd_compression_format.md
- -- separator, stating that all following arguments are file names
- ZSTD_getDecompressedSize()
Fixes:
- dictBuilder using HC levels
- legacy support from ZSTD_decompress_usingDDict()
- multi-blocks decoding with intermediate uncompressed blocks
2016-07-08 22:09:43 +02:00
Tobias Geerinckx-Rice
3970c6da5e
borgbackup: 1.0.4 -> 1.0.5
...
This update slipped in between 1.0.4 and me pushing 276448a
. Upstream says:
This is a critical bugfix release - upgrading to it is strongly recommended!
Please read https://github.com/borgbackup/borg/blob/1.0.5/docs/changes.rst .
2016-07-08 20:52:39 +02:00
Tobias Geerinckx-Rice
276448a477
borgbackup: 1.0.3 -> 1.0.4
...
Take Pypi's hint and switch to GitHub.
2016-07-08 20:39:46 +02:00
Ram Kromberg
5abd5603ed
lzfse: init at 2016-06-21
2016-07-08 13:09:16 +03:00