Commit Graph

24610 Commits

Author SHA1 Message Date
Fabián Heredia Montiel
b00c53e4ca linux/hardened/patches/4.19: 4.19.306-hardened1 -> 4.19.307-hardened1 2024-02-26 11:13:59 +01:00
kirillrdy
2feb645335
Merge pull request #291460 from Gerg-L/switcheroo
switcheroo-control: fix build
2024-02-26 20:47:38 +11:00
Atemu
43a361cf16
Merge pull request #291126 from zzzsyyy/update/xanmod
linux_xanmod, linux_xanmod_latest: 2024-02-23
2024-02-26 09:12:45 +00:00
Gerg-L
9ae5e2dc39
switcheroo-control: fix build 2024-02-25 20:41:32 -05:00
github-actions[bot]
41e7732291
Merge staging-next into staging 2024-02-25 18:01:23 +00:00
Nick Cao
2f82033153
Merge pull request #290941 from Kiskae/nvidia/470.239.06
linuxPackages.nvidiaPackages.legacy_470: 470.223.02 -> 470.239.06
2024-02-25 12:37:20 -05:00
Nick Cao
1674e0abaa
Merge pull request #291075 from r-ryantm/auto-update/linuxKernel.packages.linux_5_15.facetimehd
linuxKernel.packages.linux_5_15.facetimehd: 0.5.18 -> 0.6.8
2024-02-25 11:17:51 -05:00
Nick Cao
7b378fbdfd
Merge pull request #291074 from r-ryantm/auto-update/linuxKernel.packages.linux_5_4.virtio_vmmci
linuxKernel.packages.linux_5_4.virtio_vmmci: 0.5.0 -> 0.6.0
2024-02-25 11:17:38 -05:00
ajs124
991ec05997
Merge pull request #285915 from herrwiese/for-master/fix-273164
apparmor-utils: fix aa-remove-unknown read check
2024-02-25 15:16:23 +01:00
Jerry Starke
2ddb55732b linuxKernel.kernels.linux_zen: 6.7.5-zen1 -> 6.7.6-zen1 2024-02-25 12:15:12 +01:00
github-actions[bot]
8eb8b5cbf0
Merge staging-next into staging 2024-02-25 00:02:47 +00:00
Vladimír Čunát
6d8aba54f3
Merge #289734: staging-next 2024-02-18 2024-02-24 21:37:07 +01:00
Robert Scott
259fabc9ee
Merge pull request #282638 from risicle/ris-trivialautovarinit
cc-wrapper: add `trivialautovarinit` hardening flag support
2024-02-24 20:23:31 +00:00
Adam C. Stephens
05ad58c178
Merge pull request #290768 from sdht0/zfs-update
zfs: 2.2.2 -> 2.2.3
2024-02-24 13:38:53 -05:00
github-actions[bot]
35aa42e19a
Merge staging-next into staging 2024-02-24 18:01:21 +00:00
github-actions[bot]
d6cc5bb41d
Merge master into staging-next 2024-02-24 18:00:56 +00:00
MakiseKurisu
5068ae6e15 ch9344: 1.9 -> 2.0 2024-02-25 01:01:31 +08:00
Kiskae
1198e9d8ac linuxPackages.nvidiaPackages.legacy_470: 470.223.02 -> 470.239.06 2024-02-24 17:19:22 +01:00
Maximilian Bosch
8ca81fe6cd
Merge pull request #289629 from Ma27/keyutils-man
keyutils: split man pages into its own output
2024-02-24 16:10:52 +01:00
Ryan Lahfa
f800b6cd62
Merge pull request #291062 from agbrooks/mac80211_mesh
linux: enable CONFIG_MAC80211_MESH
2024-02-24 15:55:52 +01:00
Maximilian Bosch
4708908d82
keyutils: split man pages into its own output 2024-02-24 14:44:24 +01:00
Timo Kaufmann
77d4e2fc89
Merge pull request #290379 from jerrita/r8168_bump_version
linuxPackages.r8168: 8.048.03 -> 8.052.01
2024-02-24 14:33:17 +01:00
zzzsyyy
4d3cafbabd
linux_xanmod_latest: 6.7.5 -> 6.7.6 2024-02-24 20:11:33 +08:00
github-actions[bot]
546111468a
Merge staging-next into staging 2024-02-24 12:01:41 +00:00
github-actions[bot]
a3e2b0de90
Merge master into staging-next 2024-02-24 12:01:15 +00:00
Robert Scott
12970b96ed systemd: disable trivialautovarinit hardening flag
to avoid a reported performance regression
2024-02-24 12:00:11 +00:00
zzzsyyy
07084b7f8e
linux_xanmod: 6.6.17 -> 6.6.18 2024-02-24 19:19:00 +08:00
jerrita
ef22d82d56
linuxPackages.r8168: 8.048.03 -> 8.052.01 2024-02-24 18:11:53 +08:00
K900
f5c4b5837d
Merge pull request #289748 from picnoir/pic/ppd020
power-profiles-daemon: 0.13 -> 0.20
2024-02-24 12:30:49 +03:00
Félix Baylac Jacqué
93679d4d0a power-profiles-daemon: 0.13 -> 0.20
The upstream original maintainer is not paid anymore to maintain the
project and decided to step down. The project has been taken over by
the upower team.

This is the first release part of this upower team.

The integration tests are now relying on the powerprofilectl command:
we need to patch the python path of this dependency before running the
integration tests instead of doing that during in the fixup phase.

Taking advantage of this to remove the PostFixup phase. Not 100% about
this move: it's a bit less future proof.
2024-02-24 09:39:28 +01:00
R. Ryantm
5517a52e30 linuxKernel.packages.linux_6_7_hardened.r8125: 9.011.01 -> 9.012.03 2024-02-24 07:45:51 +00:00
R. Ryantm
837e9e39be linuxKernel.packages.linux_5_4.virtio_vmmci: 0.5.0 -> 0.6.0 2024-02-24 06:57:17 +00:00
R. Ryantm
10e6b16905 linuxKernel.packages.linux_5_15.facetimehd: 0.5.18 -> 0.6.8 2024-02-24 06:55:29 +00:00
R. Ryantm
663e3ab54e linuxKernel.packages.linux_5_10_hardened.akvcam: 1.2.4 -> 1.2.5 2024-02-24 06:28:28 +00:00
Andrew Brooks
1bb56dc55e linux: enable CONFIG_MAC80211_MESH
This enables support for 802.11s mesh networking in drivers that
support it.
2024-02-23 22:49:38 -06:00
Andrew Brooks
a56f7e234b wpa_supplicant: enable 802.11s mesh networking
Enables CONFIG_MESH, allowing the use of mode=5 in wpa_supplicant's
configuration to bring the device up in mesh-point mode.
2024-02-23 21:59:45 -06:00
github-actions[bot]
cfc5c35a0b
Merge staging-next into staging 2024-02-23 18:01:34 +00:00
Luke Granger-Brown
1ae9cee0f1
Merge pull request #290880 from simonhollingshead/anbox-cpp14
anbox: Make android-emugl compile with C++14.
2024-02-23 17:33:28 +00:00
Simon Hollingshead
a47e340955 anbox: Make android-emugl compile with C++14.
This is suggested in https://github.com/anbox/anbox/issues/2119 to support newer versions of gtest.
2024-02-23 12:56:30 +00:00
github-actions[bot]
01e36c7dab
Merge staging-next into staging 2024-02-23 12:01:45 +00:00
github-actions[bot]
d08f9b5833
Merge master into staging-next 2024-02-23 12:01:18 +00:00
Matthias Beyer
00e660b3dc
tuxedo-keyboard: 3.2.7 -> 3.2.14
Signed-off-by: Matthias Beyer <mail@beyermatthias.de>
2024-02-23 11:49:31 +01:00
K900
37a2143b4c
Merge pull request #290827 from K900/kernels-20240223
Kernels updates for 2024-02-23
2024-02-23 12:51:25 +03:00
Edward Tjörnhammar
2571e9c054 nvidia_x11.dc_535: 535.129.03 -> 535.154.05
nvidia_x11.dc_535.fabricmanager: shrink rpath, remove find leftover
2024-02-23 09:44:29 +00:00
K900
9d65642461 linux_4_19: 4.19.306 -> 4.19.307 2024-02-23 12:32:56 +03:00
K900
c97c6664fb linux_5_4: 5.4.268 -> 5.4.269 2024-02-23 12:32:54 +03:00
K900
509e1ab3c9 linux_5_10: 5.10.209 -> 5.10.210 2024-02-23 12:32:50 +03:00
K900
11926f332a linux_5_15: 5.15.148 -> 5.15.149 2024-02-23 12:32:47 +03:00
K900
daa05b7282 linux_6_1: 6.1.78 -> 6.1.79 2024-02-23 12:32:43 +03:00
K900
14134feea9 linux_6_6: 6.6.17 -> 6.6.18 2024-02-23 12:32:39 +03:00
K900
1457e5ad23 linux_6_7: 6.7.5 -> 6.7.6 2024-02-23 12:32:34 +03:00
Siddhartha
dddc87e337 zfs: 2.2.2 -> 2.2.3 2024-02-23 00:00:31 -05:00
Weijia Wang
2930699c8c Merge branch 'staging-next' into staging 2024-02-23 05:12:00 +01:00
Weijia Wang
5f5062d1ef Merge branch 'master' into staging-next 2024-02-23 05:09:55 +01:00
Sandro
4e0128e5cf
Merge pull request #284035 from peat-psuwit/for-upstream/fix-linux-rpi3 2024-02-22 22:08:13 +01:00
github-actions[bot]
f3d1249a61
Merge staging-next into staging 2024-02-22 00:02:35 +00:00
github-actions[bot]
173041b36f
Merge master into staging-next 2024-02-22 00:02:10 +00:00
Fabián Heredia Montiel
ff5f265685
Merge pull request #290360 from NixOS/update-linux-hardened
Linux Hardened Kernels 2024-02-20
2024-02-21 16:45:29 -06:00
github-actions[bot]
897e2da9da
Merge staging-next into staging 2024-02-21 18:01:21 +00:00
github-actions[bot]
bd56ae568b
Merge master into staging-next 2024-02-21 18:00:56 +00:00
Pol Dellaiera
45b928b43d
Merge pull request #285034 from Defelo/rtl8821ce
rtl8821ce: unstable-2023-05-04 -> unstable-2024-01-20
2024-02-21 16:01:13 +01:00
R. Ryantm
196486c63b android-udev-rules: 20240114 -> 20240221 2024-02-21 11:38:28 +00:00
Fabián Heredia Montiel
52675a1167 linux/hardened/patches/6.7: 6.7.4-hardened1 -> 6.7.5-hardened1 2024-02-21 00:12:13 -06:00
Fabián Heredia Montiel
a86d4e5a19 linux/hardened/patches/6.6: 6.6.16-hardened1 -> 6.6.17-hardened1 2024-02-21 00:12:12 -06:00
Fabián Heredia Montiel
10a1269f81 linux/hardened/patches/6.1: 6.1.77-hardened1 -> 6.1.78-hardened1 2024-02-21 00:12:12 -06:00
github-actions[bot]
bd9c664746
Merge staging-next into staging 2024-02-20 18:01:48 +00:00
github-actions[bot]
999dc2b653
Merge master into staging-next 2024-02-20 18:01:22 +00:00
K900
8363e9657f linux-firmware: 20240115 -> 20240220 2024-02-20 18:36:07 +03:00
github-actions[bot]
c84c70f186
Merge staging-next into staging 2024-02-20 12:01:35 +00:00
github-actions[bot]
13988f8414
Merge master into staging-next 2024-02-20 12:01:07 +00:00
Atemu
45b70ce5a4
Merge pull request #289516 from zzzsyyy/update/xanmod
linux_xanmod, linux_xanmod_latest: 2024-02-16
2024-02-20 10:01:20 +01:00
github-actions[bot]
164fdc04b5
Merge staging-next into staging 2024-02-20 06:01:43 +00:00
github-actions[bot]
ba5eeff4f5
Merge master into staging-next 2024-02-20 06:01:15 +00:00
OTABI Tomoya
4056ff58e7
Merge pull request #288031 from r-ryantm/auto-update/esdm
esdm: 1.0.0 -> 1.0.2
2024-02-20 10:45:25 +09:00
github-actions[bot]
dd8348e316
Merge staging-next into staging 2024-02-20 00:02:31 +00:00
github-actions[bot]
e5105e6cec
Merge master into staging-next 2024-02-20 00:02:04 +00:00
Orivej Desh (NixOS)
9ff5d9075a
Merge pull request #287435 from orivej/linux-rt_6_6
linux-rt_6_6: init at 6.6.15-rt22
2024-02-19 22:39:47 +00:00
Maxine Aubrey
1fa3ff53f0
bolt: 0.9.6 → 0.9.7
https://gitlab.freedesktop.org/bolt/bolt/-/compare/0.9.6...0.9.7
2024-02-19 18:00:07 +01:00
github-actions[bot]
093948b0c8
Merge staging-next into staging 2024-02-19 12:01:49 +00:00
github-actions[bot]
50cda7aaf0
Merge master into staging-next 2024-02-19 12:01:18 +00:00
Alyssa Ross
e236b838c7 linux-rt_5_15: 5.15.145-rt73 -> 5.15.148-rt74 2024-02-19 11:57:00 +01:00
Alyssa Ross
7c0bad83b8 linux_testing: 6.8-rc4 -> 6.8-rc5 2024-02-19 11:57:00 +01:00
github-actions[bot]
36144b8ab1
Merge staging-next into staging 2024-02-19 00:02:57 +00:00
github-actions[bot]
de0bf263cc
Merge master into staging-next 2024-02-19 00:02:25 +00:00
Sandro Jäckel
8cdc94a92e
intel-compute-runtime: 23.48.27912.11 -> 24.05.28454.6, add meta.changelog
Changelog: https://github.com/intel/compute-runtime/releases/tag/24.05.28454.6
2024-02-19 00:32:28 +01:00
Mario Rodas
aa9b919c40
Merge pull request #288389 from trofi/shadow-update
shadow: 4.14.3 -> 4.14.5
2024-02-18 17:33:56 -05:00
Pierre Bourdon
26efa75ee6
ethq: 0.6.2 -> 0.6.3 2024-02-18 19:37:16 +01:00
github-actions[bot]
d076cde70c
Merge master into staging-next 2024-02-18 18:00:59 +00:00
Thiago Kenji Okada
850934d1c1
Merge pull request #289695 from JerrySM64/update-kernels
linuxKernel.kernels.linux_zen: 6.7.4-zen1 -> 6.7.5-zen1 ; linuxKernel.kernels.linux_lqx: 6.7.4-lqx1 -> 6.7.5-lqx1
2024-02-18 12:44:52 +00:00
github-actions[bot]
b81c130216
Merge master into staging-next 2024-02-18 12:01:09 +00:00
R. Ryantm
7ade924af4 openvswitch: 3.2.2 -> 3.3.0 2024-02-18 08:43:37 +00:00
Jerry Starke
f1bc8cd22e linuxKernel.kernels.linux_lqx: 6.7.4-lqx1 -> 6.7.5-lqx1 2024-02-18 08:27:51 +01:00
K900
99bebcbfa4 nixos-rebuild: avoid --preserve-env
sudo-rs does not support it, but also it's just spooky action at a distance.
2024-02-18 10:24:51 +03:00
Domen Kožar
296dced8a3
Merge pull request #288456 from r-ryantm/auto-update/checkpolicy
checkpolicy: 3.5 -> 3.6
2024-02-18 06:30:03 +00:00
Jerry Starke
feca3d9963 linuxKernel.kernels.linux_zen: 6.7.4-zen1 -> 6.7.5-zen1 2024-02-18 07:11:49 +01:00
github-actions[bot]
e662338182
Merge staging-next into staging 2024-02-17 12:01:31 +00:00
zzzsyyy
65706932e7
linux_xanmod_latest: 6.6.15 -> 6.7.5 2024-02-17 19:56:40 +08:00
zzzsyyy
cee6d2ba3b
linux_xanmod: 6.1.76 -> 6.6.17 2024-02-17 19:55:47 +08:00
Vladimír Čunát
dc738b327d
Merge #287468: pkgsMusl.ffado: fix build
...into staging
2024-02-17 10:59:57 +01:00
K900
5069879f50
Merge pull request #283904 from cryo28/master
linux: CONFIG_LED_TRIGGER_PHY=y
2024-02-17 12:26:18 +03:00
Vladimír Čunát
5711440e84
Merge #287441: apparmor: 3.1.6 -> 3.1.7
...into staging
2024-02-17 10:25:37 +01:00
K900
59c08c8175
Merge pull request #289354 from alyssais/linux-6.6.17
Linux kernels 2024-02-16
2024-02-17 12:25:37 +03:00
Florian Klink
a6756325e9
Merge pull request #287310 from trofi/linuxPackages_latest.perf-fix-on-gcc-13
linuxPackages_latest.perf: add `-O1` workaround for `gcc-13`
2024-02-17 11:18:31 +02:00
Alyssa Ross
f947867e8e
linux_6_7: 6.7.4 -> 6.7.5 2024-02-16 19:38:15 +01:00
Alyssa Ross
f4c0a20bb8
linux_6_1: 6.1.77 -> 6.1.78 2024-02-16 19:32:25 +01:00
Alyssa Ross
9c0e19a36c
linux_6_6: 6.6.16 -> 6.6.17 2024-02-16 19:32:09 +01:00
github-actions[bot]
6d90f72388
Merge staging-next into staging 2024-02-16 18:01:48 +00:00
Kiskae
a951f8dc07
linuxPackages.nvidiaPackages.vulkan_beta: 535.43.25 -> 535.43.28 2024-02-16 18:05:39 +01:00
github-actions[bot]
b84d283f08
Merge staging-next into staging 2024-02-16 00:02:45 +00:00
Fabián Heredia Montiel
43983b487b
Merge pull request #288871 from NixOS/update-linux-hardened
Linux Hardened Kernels 2024-02-13
2024-02-15 15:08:32 -06:00
maxine
69b60f65b7
Merge pull request #288979 from trofi/iwd-update 2024-02-15 17:53:14 +01:00
github-actions[bot]
14262b89f6
Merge staging-next into staging 2024-02-15 12:01:37 +00:00
Sergei Trofimovich
d251dd638d iwd: 2.13 -> 2.14
Changes: https://git.kernel.org/pub/scm/network/wireless/iwd.git/tree/ChangeLog?h=2.14
2024-02-15 07:47:35 +00:00
Weijia Wang
c3c1572531
Merge pull request #288860 from bbjubjub2494/bbjubjub
maintainers: rename lourkeur -> bbjubjub, update details
2024-02-15 08:08:54 +01:00
github-actions[bot]
e49cc7f7ed
Merge staging-next into staging 2024-02-15 06:01:45 +00:00
Kira Bruneau
d314410ce5
Merge pull request #288441 from r-ryantm/auto-update/linuxKernel.packages.linux_4_19.xpadneo
linuxKernel.packages.linux_4_19.xpadneo: 0.9.5 -> 0.9.6
2024-02-14 20:16:39 -05:00
Mario Rodas
afb9a45824
Merge pull request #287053 from trofi/ocf-resource-agents-fix-autoconf-2.72-build
ocf-resource-agents: fix build against `autoconf-2.72`
2024-02-14 20:09:56 -05:00
Sergei Trofimovich
8e4a4e54f8 shadow: 4.14.3 -> 4.14.5
Changes:
- https://github.com/shadow-maint/shadow/releases/tag/4.14.4
- https://github.com/shadow-maint/shadow/releases/tag/4.14.5
2024-02-14 22:14:20 +00:00
Kira Bruneau
c6312707b8 linuxPackages.xpadneo: add updateScript 2024-02-14 15:09:20 -05:00
Julie B.
0194efaf82
maintainers: rename lourkeur -> bbjubjub, update details 2024-02-14 20:58:18 +01:00
github-actions[bot]
fc96101774
Merge staging-next into staging 2024-02-14 18:01:42 +00:00
maxine
8c8cc53769
Merge pull request #288531 from chewblacka/update-undervolt
undervolt: 0.3.0 -> 0.4.0
2024-02-14 17:30:53 +01:00
R. Ryantm
2e4c0b9dbc ipset: 7.19 -> 7.21 2024-02-14 07:29:05 +00:00
toastal
df3a1a871a zfsUnstable: 2.2.3-unstable-2024-01-26 → 2.2.3-unstable-2024-02-12
Patch now includes compatibility for 6.8 kernels (even if ðey aren’t on
offer in nixpkgs at ðis time).
2024-02-14 11:00:21 +07:00
Fabián Heredia Montiel
1eec9594e5 linux/hardened/patches/6.7: 6.7.3-hardened1 -> 6.7.4-hardened1 2024-02-13 14:35:04 -06:00
Fabián Heredia Montiel
358862673f linux/hardened/patches/6.6: 6.6.15-hardened1 -> 6.6.16-hardened1 2024-02-13 14:35:00 -06:00
Fabián Heredia Montiel
d6aa414691 linux/hardened/patches/6.1: 6.1.76-hardened1 -> 6.1.77-hardened1 2024-02-13 14:34:55 -06:00
John Garcia
e9a724f00f undervolt: 0.3.0 -> 0.4.0 2024-02-13 12:32:07 +00:00
R. Ryantm
13dc069c6f checkpolicy: 3.5 -> 3.6 2024-02-13 04:42:03 +00:00
R. Ryantm
23d741d802 linuxKernel.packages.linux_4_19.xpadneo: 0.9.5 -> 0.9.6 2024-02-13 03:36:20 +00:00
github-actions[bot]
c0e8987b85
Merge staging-next into staging 2024-02-13 00:02:40 +00:00
Sandro
452e6c8246
Merge pull request #286083 from nix-julia/update-linuxPackages.rtl8188eus
linuxPackages.rtl8188eus: support kernel 6.7
2024-02-12 22:44:15 +01:00
nix-julia
4b809a7a61 linuxPackages.rtl8188eus: support kernel 6.7 2024-02-12 17:39:57 +03:30
github-actions[bot]
e581fdc2c3
Merge staging-next into staging 2024-02-12 12:02:01 +00:00
Alyssa Ross
9bf9e3708e linux-rt_6_1: 6.1.75-rt23 -> 6.1.77-rt24 2024-02-12 11:31:06 +01:00
Alyssa Ross
8aab326d23 linux_testing: 6.8-rc3 -> 6.8-rc4 2024-02-12 11:31:06 +01:00
github-actions[bot]
40b6ee19fc
Merge staging-next into staging 2024-02-12 06:01:21 +00:00
7c6f434c
4477ea4df7
Merge pull request #288032 from SebTM/update/sysdig_0351
sysdig: 0.34.1 -> 0.35.1
2024-02-12 05:03:38 +00:00
github-actions[bot]
1153f50c55
Merge staging-next into staging 2024-02-12 00:02:35 +00:00
Nick Cao
bb6a57b39c
Merge pull request #287807 from NickCao/uhk-agent
uhk-agent: fix build
2024-02-11 17:19:03 -05:00
Sergei Trofimovich
9687bedc4c sgx-azure-dcap-client: fix gcc-13 build failure
Without the change build fails on `master` as
https://hydra.nixos.org/build/247706272:

    local_cache.cpp: In function 'void throw_if(bool, const std::string&)':
    local_cache.cpp:40:20: error: 'runtime_error' is not a member of 'std'
       40 |         throw std::runtime_error(error);
          |                    ^~~~~~~~~~~~~
    local_cache.cpp:17:1: note: 'std::runtime_error' is defined in header '<stdexcept>'; did you forget to '#include <stdexcept>'?
       16 | #include <sys/file.h>
      +++ |+#include <stdexcept>
       17 | #include <sys/stat.h>
2024-02-11 17:19:57 +00:00
Sebastian Sellmeier
6f37738cf7
sysdig: remove unneeded tinydir (838ffdeb05) 2024-02-11 14:28:33 +01:00
Sebastian Sellmeier
b18a422f41
sysdig: 0.34.1 -> 0.35.1 2024-02-11 14:28:33 +01:00
R. Ryantm
aab04e7db3 esdm: 1.0.0 -> 1.0.2 2024-02-11 12:56:30 +00:00
github-actions[bot]
1fe30fdf4b
Merge staging-next into staging 2024-02-10 18:01:16 +00:00
Nick Cao
11205eb792
uhk-agent: fix build 2024-02-10 10:45:52 -05:00
Nick Cao
c09ca927ab
Merge pull request #275805 from oluceps/shufflecake
shufflecake: init at 0.4.4
2024-02-10 10:28:53 -05:00
Yueh-Shun Li
f10331cf2e buildLinux: passthru by <pkg>.overrideAttrs instead of lib.extendDerivation 2024-02-10 22:03:53 +08:00
Muhammad Falak R Wani
35f45b6cb9 numactl: 2.0.17 -> 2.0.18
Diff: https://github.com/numactl/numactl/compare/v2.0.17...v2.0.18
Signed-off-by: Muhammad Falak R Wani <falakreyaz@gmail.com>
2024-02-10 10:48:30 +01:00
github-actions[bot]
ff00aed7c8
Merge staging-next into staging 2024-02-10 06:01:46 +00:00
K900
ee8f5e0439
Merge pull request #287610 from trofi/linuxPackages_4_19_hardened.kernel.configfile-fix-config
nixos/hardened: fix lower bounds of hardened options
2024-02-10 04:49:49 +03:00
github-actions[bot]
1022c88f8b
Merge staging-next into staging 2024-02-10 00:02:42 +00:00
Sergei Trofimovich
9ce46e61eb nixos/hardened: fix lower bounds of hardened options
Without the change build of `linux-config-4.19.306` fails as
https://cache.nixos.org/log/994zy6g5fsb4p6c8jdwham8sp0mqh1w4-linux-config-4.19.306.drv:

    error: unused option: INIT_ON_ALLOC_DEFAULT_ON
    error: unused option: INIT_ON_FREE_DEFAULT_ON
    error: unused option: UBSAN_TRAP
    error: unused option: ZERO_CALL_USED_REGS
2024-02-09 23:26:29 +00:00
maxine
f89e84789b
Merge pull request #286428 from r-ryantm/auto-update/iotop-c
iotop-c: 1.25 -> 1.26
2024-02-09 22:13:25 +01:00
maxine
b4da8ac7aa
Merge pull request #287059 from r-ryantm/auto-update/ell
ell: 0.61 -> 0.62
2024-02-09 21:51:53 +01:00
Alyssa Ross
782e2d252d
libselinux: remove use of LFS64 function
This function has been removed in musl 1.2.4.
2024-02-09 14:34:48 +01:00
Muhammad Falak R Wani
cf07cc7f7f numactl: 2.0.16 -> 2.0.17
Diff: https://github.com/numactl/numactl/compare/v2.0.16...v2.0.17
Signed-off-by: Muhammad Falak R Wani <falakreyaz@gmail.com>
2024-02-09 13:08:00 +01:00
Alyssa Ross
4b8bdbc8bd
pkgsMusl.ffado: fix build 2024-02-09 12:13:01 +01:00
oluceps
2ced6caf06
shufflecake: init at 0.4.4
Co-authored-by: Nick Cao <nickcao@nichi.co>
2024-02-09 18:08:19 +08:00
Alyssa Ross
7dcc6adc5d libselinux: 3.3 -> 3.6 2024-02-09 10:22:56 +01:00
ajs124
635e64ed17 apparmor: 3.1.6 -> 3.1.7
https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.7
2024-02-09 10:13:43 +01:00
Orivej Desh
204c33e6e1 linux-rt_6_6: init at 6.6.15-rt22 2024-02-09 08:43:20 +00:00
github-actions[bot]
f5e5c08eb3
Merge staging-next into staging 2024-02-09 06:01:30 +00:00
github-actions[bot]
488d4a827f
Merge master into staging-next 2024-02-09 06:01:01 +00:00
Adam C. Stephens
759adbf8b0
Merge pull request #287337 from mweinelt/openvswitch-3.2.2-and-2.17.9
openvswitch: 3.2.1 -> 3.2.2; openvswitch-lts: 2.17.8 -> 2.17.9
2024-02-08 23:00:46 -05:00
Nick Cao
75fb7bbc29
Merge pull request #285969 from zzzsyyy/update/xanmod
linux_xanmod, linux_xanmod_latest: 2024-02-01
2024-02-08 19:35:28 -05:00
Martin Weinelt
e43d00a71a
openvswitch-lts: 2.17.8 -> 2.17.9
https://www.openvswitch.org/releases/NEWS-2.17.9.txt
https://mail.openvswitch.org/pipermail/ovs-announce/2024-February/000340.html
https://mail.openvswitch.org/pipermail/ovs-announce/2024-February/000339.html

Fixes: CVE-2023-3966, CVE-2023-5366
2024-02-09 01:26:41 +01:00
Martin Weinelt
c4be8e51b8
openvswitch: 3.2.1 -> 3.2.2
https://www.openvswitch.org/releases/NEWS-3.2.2.txt
https://mail.openvswitch.org/pipermail/ovs-announce/2024-February/000340.html
https://mail.openvswitch.org/pipermail/ovs-announce/2024-February/000339.html

Fixes: CVE-2023-3966, CVE-2023-5366
2024-02-09 01:26:18 +01:00
github-actions[bot]
3904cc7af5
Merge staging-next into staging 2024-02-09 00:02:52 +00:00
github-actions[bot]
592e5dab71
Merge master into staging-next 2024-02-09 00:02:27 +00:00
Weijia Wang
9db55bdd84
Merge pull request #282603 from superherointj/anbox-mark-broken
anbox: fix build
2024-02-08 22:55:52 +01:00
Artturi
0ffb149130
Merge pull request #286344 from ShamrockLee/kernel-to-function
buildLinux: use lib.toFunction
2024-02-08 23:14:51 +02:00
Sergei Trofimovich
410d15e156 linuxPackages_latest.perf: add -O1 workaround for gcc-13
Without the change `perf top` just crashes early as:

    $ perf top
    perf: Segmentation fault
    -------- backtrace --------
    /<<NIX>>/perf-linux-6.7.4/bin/perf[0x627382]
    /<<NIX>>/glibc-2.38-27/lib/libc.so.6(+0x3deb0)[0x7f423a054eb0]
    /<<NIX>>/perf-linux-6.7.4/bin/perf(__dsos__findnew_link_by_longname_id+0x34b)[0x53655b]
    /<<NIX>>/perf-linux-6.7.4/bin/perf(map__new+0x35f)[0x55884f]
    /<<NIX>>/perf-linux-6.7.4/bin/perf(machine__process_mmap2_event+0xb7)[0x557b27]
    /<<NIX>>/perf-linux-6.7.4/bin/perf(perf_tool__process_synth_event+0x7e)[0x59e86e]
    /<<NIX>>/perf-linux-6.7.4/bin/perf(perf_event__synthesize_mmap_events+0x370)[0x59f0e0]
    /<<NIX>>/perf-linux-6.7.4/bin/perf[0x59fd5c]
    /<<NIX>>/perf-linux-6.7.4/bin/perf[0x59ffcc]
    /<<NIX>>/perf-linux-6.7.4/bin/perf[0x5a0093]
    /<<NIX>>/glibc-2.38-27/lib/libc.so.6(+0x8b333)[0x7f423a0a2333]
    /<<NIX>>/glibc-2.38-27/lib/libc.so.6(+0x10defc)[0x7f423a124efc]

It's a known `gcc-12+` bug not yet fixed in `gcc-13`: https://gcc.gnu.org/PR111009

Let's demote optimizations from `-O2` down to `-O1` to disable any
VRP-related effects for affected `gcc-13`.
2024-02-08 20:52:44 +00:00
Nick Cao
e7398356e4
Merge pull request #286908 from r-ryantm/auto-update/hwdata
hwdata: 0.378 -> 0.379
2024-02-08 14:30:08 -05:00
github-actions[bot]
74098fff88
Merge master into staging-next 2024-02-08 06:01:13 +00:00
Raito Bezarius
2d78f55438 pam_usb, nixos/pam-usb: drop
`security.pam.usb` is broken anyway and upstream has abandoned the software.
2024-02-08 02:59:45 +01:00
R. Ryantm
39ef0c2883 ell: 0.61 -> 0.62 2024-02-07 20:38:52 +00:00
Sergei Trofimovich
7320119990 ocf-resource-agents: fix build against autoconf-2.72
Without the change build fails in` master` as https://hydra.nixos.org/build/247269225:

    checking whether gcc supports "-Wunsigned-char"... checking how to run the C preprocessor... gcc -E
    configure: error: in '/build/source':
    configure: error: C preprocessor "gcc -E" fails sanity check
    See 'config.log' for more details
2024-02-07 19:37:34 +00:00
github-actions[bot]
296d2f6991
Merge master into staging-next 2024-02-07 18:00:58 +00:00
Franz Pletz
18bc4c5312
Merge pull request #286737 from herbetom/batman-adv_2024.0 2024-02-07 17:48:47 +01:00
Sergei Trofimovich
4ebe4721a6 ocf-resource-agents: expose it's inputs as attributes
With individual attributes exposed it's easier to interrogate and
upgrade constituents in `nixpkgs`.
2024-02-07 16:33:14 +00:00
github-actions[bot]
03dd2b9470
Merge master into staging-next 2024-02-07 12:01:11 +00:00
Sergei Trofimovich
35e16bd907 ocf-resource-agents: fix pos attribute to define source location
Without the change commands like

    $ nix edit -f. ocf-resource-agents

do not point to a file.
2024-02-07 10:32:37 +00:00
R. Ryantm
ae3fcc3702 hwdata: 0.378 -> 0.379 2024-02-07 06:35:21 +00:00
Sergei Trofimovich
8c618c742c crda: remove package
According to upstream
https://lore.kernel.org/linux-wireless/455bafff0d609eb182ba30a5fbf319888e0e961d.camel@sipsolutions.net/
`crda` is not needed for kernels `4.16` or later. Such old kernels are
not in `nixpkgs` anymore.
2024-02-06 22:50:09 +00:00
Tom Herbers
fbb42119b3
batman-adv: 2023.3 -> 2024.0
Changelog: https://www.open-mesh.org/news/115
2024-02-06 13:16:23 +01:00
github-actions[bot]
21465e0ebc
Merge master into staging-next 2024-02-06 12:00:59 +00:00
ajs124
ba6db7af5d
Merge pull request #285549 from helsinki-systems/upd/targetcli
targetcli: 2.1.57 -> 2.1.58
2024-02-06 12:19:54 +01:00
K900
3b0709da3e
Merge pull request #286665 from K900/packet-of-doom
Kernel updates for 2024-02-06
2024-02-06 14:11:48 +03:00
Thiago Kenji Okada
3483691863
Merge pull request #286611 from JerrySM64/update-kernels
linuxKernel.kernels.linux_zen: 6.7.3-zen1 -> 6.7.4-zen1 ; linuxKernel.kernels.linux_lqx: 6.7.3-lqx1 -> 6.7.4-lqx1
2024-02-06 09:30:18 +00:00
K900
ced0d1d9dd linux_6_1: 6.1.76 -> 6.1.77 2024-02-06 09:50:06 +03:00
K900
e6a3025e22 linux_6_6: 6.6.15 -> 6.6.16 2024-02-06 09:50:02 +03:00
K900
fa71a47bfa linux_6_7: 6.7.3 -> 6.7.4 2024-02-06 09:49:59 +03:00
K900
dc52c51a6e
Merge pull request #286296 from alyssais/linux-6.8-rc3
Linux kernels 2024-02-04
2024-02-06 09:49:34 +03:00
github-actions[bot]
952bd69944
Merge master into staging-next 2024-02-06 06:00:54 +00:00
Pol Dellaiera
119232480d
Merge pull request #285313 from drupol/displaylink/refactor
displaylink, evdi: refactor
2024-02-06 06:44:39 +01:00
Jerry Starke
3695032a60 linuxKernel.kernels.linux_lqx: 6.7.3-lqx1 -> 6.7.4-lqx1 2024-02-06 03:52:58 +01:00
Jerry Starke
f607fdbafa linuxKernel.kernels.linux_zen: 6.7.3-zen1 -> 6.7.4-zen1 2024-02-06 03:51:09 +01:00
github-actions[bot]
5f4d3d57a7
Merge master into staging-next 2024-02-05 12:01:16 +00:00
Andreas Wiese
b69ffeb3a2 apparmor-utils: fix aa-remove-unknown read check
let aaru = "aa-remove-unknown"; in

aaru tests whether /sys/kernel/security/apparmor/profiles can be opened.
Even though the file's permissions usually are 0444, open() still might
return `EPERM`, as this is a virtual filesystem.  Thus, using `test -r`
doesn't suffice for this check.

What aaru does to solve this is (approximately)

  if ! read … < /sys/kernel/security/apparmor/profiles; then
    echo "Meh";
  fi

In principal this works just fine.  When looking closer, it doesn't
(which is the root cause of #273164).  Careful readers will notice that
the actual access check (for `open()`) isn't actually related to the
`read` invocation, but the shell's input redirection, which works
totally fine:

If the file can't be opened, the shell will return an error and the test
fails.  `read` won't even be invoked.  The culprit is, the `read` shell
builtin might potentially jeopardize the *successful* test result
(`open()` succeeding): When no profiles are loaded, the file will be
empty and `read` will return 1 for `EOF`.

As the `if`'s command is only invoked after the actual test succeeded,
`true` is the command of choice here.

I would prefer fixing this upstream, but I refuse to register an account
there because GitLab.com wants me to validate an email address (sure), a
phone number (why?) and a valid payment method ([redacted]).

This fixes #273164 (»Apparmor service fails to start after nixos-rebuild
switch«).
2024-02-05 09:50:58 +01:00
R. Ryantm
f0096a0be4 iotop-c: 1.25 -> 1.26 2024-02-05 05:45:27 +00:00
Jerry Starke
770fdb1d24 linuxKernel.kernels.linux_lqx: 6.7.2-lqx2 -> 6.7.3-lqx1 2024-02-05 01:59:55 +01:00
Yueh-Shun Li
e768da839b buildLinux: use lib.toFunction
Refactor expression trivially with `lib.toFunction`.
2024-02-05 02:57:55 +08:00
Alyssa Ross
764133608f
linux/hardened/patches/6.7: 6.7.2-hardened1 -> 6.7.3-hardened1 2024-02-04 15:33:06 +01:00
Alyssa Ross
a8932b82ac
linux/hardened/patches/6.6: 6.6.14-hardened1 -> 6.6.15-hardened1 2024-02-04 15:32:39 +01:00
Alyssa Ross
7611c991f3
linux/hardened/patches/6.1: 6.1.75-hardened1 -> 6.1.76-hardened1 2024-02-04 15:32:12 +01:00
Alyssa Ross
c2dd29b8b3
linux-rt_5_10: 5.10.204-rt100 -> 5.10.209-rt101 2024-02-04 15:31:23 +01:00
Alyssa Ross
b826cdb584
linux_testing: 6.8-rc2 -> 6.8-rc3 2024-02-04 15:30:50 +01:00
github-actions[bot]
ebdc85862b
Merge master into staging-next 2024-02-04 00:02:24 +00:00
Nick Cao
db842684bb
Merge pull request #286048 from Kiskae/nvidia/535.43.25
linuxPackages.nvidiaPackages.vulkan_beta: 535.43.24 -> 535.43.25
2024-02-03 14:47:57 -05:00
github-actions[bot]
5a036cc96a
Merge master into staging-next 2024-02-03 18:00:51 +00:00
Nick Cao
d829bac26a
Merge pull request #285990 from r-ryantm/auto-update/power-calibrate
power-calibrate: 0.01.35 -> 0.01.36
2024-02-03 10:50:45 -05:00
Kiskae
1243fd78ee linuxPackages.nvidiaPackages.vulkan_beta: 535.43.24 -> 535.43.25 2024-02-03 16:38:40 +01:00
Kiskae
ca149f54a9 linuxPackages.nvidiaPackages.dc_520: mark as broken on 6.5 2024-02-03 13:39:30 +01:00
Kiskae
f649a4a4b7 linuxPackages.nvidiaPackages: add common patch for new kernel releases 2024-02-03 12:59:33 +01:00
R. Ryantm
12d763cc43 power-calibrate: 0.01.35 -> 0.01.36 2024-02-03 07:53:18 +00:00
zzzsyyy
17e5d0dfed
linux_xanmod_latest: 6.6.13 -> 6.6.15 2024-02-03 15:01:15 +08:00
Vladimír Čunát
6597d68eb6
Merge #285063: pkgsMusl.pam: fix build
...into staging
2024-02-03 07:40:10 +01:00
zzzsyyy
4c25ff02e2
linux_xanmod: 6.1.74 -> 6.1.76 2024-02-03 14:36:39 +08:00
Pol Dellaiera
12490c7151
evdi: update code style 2024-02-02 21:36:30 +01:00
Pol Dellaiera
93d5d8dcde
evdi: sort meta attributes 2024-02-02 21:36:28 +01:00
Pol Dellaiera
7ae4984c30
evdi: add missing phase hooks 2024-02-02 21:35:23 +01:00
Pol Dellaiera
25b075dffd
evdi: use finalAttrs pattern 2024-02-02 21:35:21 +01:00
Pol Dellaiera
a4e9c08870
displaylink: sort meta attributes and add meta.mainProgram 2024-02-02 21:34:21 +01:00
Pol Dellaiera
cacc44a576
displaylink: switch to makeBinaryWrapper 2024-02-02 21:34:21 +01:00
Pol Dellaiera
1551a2e3e2
displaylink: add missing phase hooks 2024-02-02 21:34:21 +01:00
Pol Dellaiera
859ee774e1
displaylink: use finalAttrs pattern 2024-02-02 21:34:21 +01:00
github-actions[bot]
58c80dd7b8
Merge staging-next into staging 2024-02-02 18:01:50 +00:00
Pol Dellaiera
10fb14a187
Merge pull request #279565 from illustris/displaylink
linuxPackages.evdi: 1.14.1 -> 1.14.1-unstable-2024-01-30
2024-02-02 17:51:14 +01:00
nikstur
bba94bbc26
Merge pull request #268559 from mrcjkb/tuxedo-rs
tuxedo-rs: 0.2.3 -> 0.3.0
2024-02-02 16:40:47 +01:00
github-actions[bot]
6b866c8f85
Merge staging-next into staging 2024-02-02 00:02:44 +00:00
Nick Cao
91651ab69f
Merge pull request #285586 from Kiskae/nvidia/535.43.24
linuxPackages.nvidiaPackges.vulkan_beta: 535.43.23 -> 535.43.24
2024-02-01 14:36:31 -05:00
Adam C. Stephens
ed837d2f8b
Merge pull request #283730 from toastal/zfsUnstable-2.2.3
zfsUnstable: 2.2.2 → 2.2.3-unstable-2024-01-22
2024-02-01 14:29:34 -05:00
github-actions[bot]
381e01e471
Merge staging-next into staging 2024-02-01 18:01:21 +00:00
Kiskae
aab5f35c21 linuxPackages.nvidiaPackges.vulkan_beta: 535.43.23 -> 535.43.24 2024-02-01 18:34:05 +01:00
Fabián Heredia Montiel
596f0169d5
Merge pull request #285502 from Ma27/linux-kernel-updates
Linux kernel updates 2024-02-01
2024-02-01 10:26:18 -06:00
ajs124
d0846f1476 targetcli: 2.1.57 -> 2.1.58
https://github.com/open-iscsi/targetcli-fb/releases/tag/v2.1.58
2024-02-01 17:14:14 +01:00
Jerry Starke
404b336d16 linuxKernel.kernels.linux_lqx: 6.7.2-lqx1 -> 6.7.2-lqx2 2024-02-01 13:59:59 +01:00
Jerry Starke
6b7ba6bef8 linuxKernel.kernels.linux_zen: 6.7.2-zen1 -> 6.7.3-zen1 2024-02-01 13:57:19 +01:00
github-actions[bot]
b0861ba3fd
Merge staging-next into staging 2024-02-01 12:01:23 +00:00
Martin Weinelt
27fa02d0f1
Merge remote-tracking branch 'origin/staging-next' into staging
Conflicts:
-	pkgs/development/compilers/llvm/10/clang/default.nix
- pkgs/development/compilers/llvm/8/clang/default.nix
2024-02-01 12:25:11 +01:00
illustris
1e60fbe7e0
linuxPackages.evdi: 1.14.1 -> 1.14.1-unstable-2024-01-30 2024-02-01 15:25:37 +05:30
Weijia Wang
aacf584689
Merge pull request #285224 from wegank/raspberrypi-wireless-typo
raspberrypiWirelessFirmware: fix typo
2024-02-01 10:50:57 +01:00
Maximilian Bosch
a858cd498a
linux_latest-libre: 19482 -> 19489 2024-02-01 09:54:56 +01:00
Maximilian Bosch
197da6a2f4
linux-rt_6_1: 6.1.73-rt22 -> 6.1.75-rt23 2024-02-01 09:54:41 +01:00
Maximilian Bosch
b1b40b70c6
linux_6_1: 6.1.75 -> 6.1.76 2024-02-01 09:54:23 +01:00
Maximilian Bosch
1eb315f20d
linux_6_6: 6.6.14 -> 6.6.15 2024-02-01 09:54:13 +01:00
Maximilian Bosch
38ce0ed459
linux_6_7: 6.7.2 -> 6.7.3 2024-02-01 09:54:05 +01:00
Adam Stephens
75ec325cb9
nixos/pam: remove pam_cgfs
pam_cgfs is a cgroups-v1 pam module. Verified with upstream that
this module no longer necessary on cgroups-v2 systems.
2024-01-31 17:19:23 -05:00
Adam Stephens
184637940b
lxc: fix aarch64 build failure
Starting with commit 1cf2d7357c lxc is
failing on aarch64 only. For whatever reason, the version check done
on docbook2man here is no longer registering as >=0.8.8

3efa1c3037/meson.build (L323)

This falls through to this line, which changes the behavior of the
configured sgml header.

3efa1c3037/meson.build (L327)

Instead of figuring out /why/ this is the case, I'm just going to skip
the check for lxc since we won't ever ship docbook2x < 0.8.
2024-01-31 09:02:26 -05:00
Weijia Wang
467dc9334d raspberrypiWirelessFirmware: fix typo 2024-01-31 08:07:15 +01:00
K900
f318aa45df
Merge pull request #285090 from alyssais/ffado-2.4.8
ffado: 2.4.7 -> 2.4.8
2024-01-31 09:29:05 +03:00
toastal
fd12b90a57 zfsUnstable: 2.2.2 → 2.2.3-unstable-2024-01-26
Should have patches for 6.7 compatibility
2024-01-31 11:04:55 +07:00
Marc Jakobi
25041c54e2 tuxedo-rs: 0.2.3 -> 0.3.0 2024-01-31 01:09:35 +01:00
Defelo
3626179781
rtl8821ce: unstable-2023-05-04 -> unstable-2024-01-20 2024-01-31 00:19:54 +01:00
Alyssa Ross
9f0215d189
pkgsMusl.pam: fix build 2024-01-30 22:52:22 +01:00
Alyssa Ross
f9272aa060
ffado: 2.4.7 -> 2.4.8 2024-01-30 21:50:23 +01:00
R. Ryantm
2356d90e39 mdevctl: 1.2.0 -> 1.3.0 2024-01-30 19:21:35 +00:00
Robert Hensing
056a4d8d52
Merge pull request #283406 from tfc/nixos-rebuild-socket
nixos-rebuild: Handle too-long tmpdir paths on macOS
2024-01-30 19:02:37 +01:00
R. Ryantm
3a7f143a4f bpftrace: 0.20.0 -> 0.20.1 2024-01-30 09:09:07 +00:00
Ratchanan Srirattanamet
bb51848e23 linux_rpi3: fix build failure due to wrong Kconfig
Because of NixOS's generate-config.pl tries to answer 'M' to as much
configs as possible, this exposes the wrong Kconfig in the RPi-specific
code which is added in the new kernel tree intended to support RPi 5.

Add kernel patches to fix the Kconfig, which results in the relavant
part being disabled on the RPi 3 build of the kernel.
2024-01-30 15:30:03 +07:00
github-actions[bot]
6a27b0be74
Merge staging-next into staging 2024-01-29 18:01:37 +00:00
Marc Jakobi
eee002d387 tuxedo-rs: add xaverdh to maintainer list 2024-01-29 18:56:16 +01:00
Alyssa Ross
bee5a980c1 linux_latest-libre: 19473 -> 19482 2024-01-29 17:37:49 +01:00
Alyssa Ross
92d90fd5b1 linux_testing: 6.8-rc1 -> 6.8-rc2 2024-01-29 17:37:49 +01:00
Sandro
eb86b39576
Merge pull request #284642 from r-ryantm/auto-update/intel-compute-runtime 2024-01-29 13:37:11 +01:00
Weijia Wang
2220b9a447
Merge pull request #274695 from r-ryantm/auto-update/libsepol
libsepol: 3.5 -> 3.6
2024-01-29 13:21:50 +01:00
github-actions[bot]
66542bb884
Merge staging-next into staging 2024-01-29 12:01:40 +00:00
Weijia Wang
2dc6d35bd0
Merge pull request #273718 from r-ryantm/auto-update/kbd
kbd: 2.6.3 -> 2.6.4
2024-01-29 12:29:40 +01:00
markuskowa
5ef1851bb4
Merge pull request #284613 from r-ryantm/auto-update/rdma-core
rdma-core: 49.1 -> 50.0
2024-01-29 10:06:27 +01:00
Fabián Heredia Montiel
45fad8902f linux/hardened/patches/6.7: init at 6.7.2-hardened1 2024-01-29 09:44:08 +01:00
Fabián Heredia Montiel
018def54e4 linux/hardened/patches/6.6: 6.6.13-hardened1 -> 6.6.14-hardened1 2024-01-29 09:44:08 +01:00
Fabián Heredia Montiel
b3f3397b4b linux/hardened/patches/6.1: 6.1.74-hardened1 -> 6.1.75-hardened1 2024-01-29 09:44:08 +01:00
Fabián Heredia Montiel
33dd85989d linux/hardened/patches/5.4: 5.4.267-hardened1 -> 5.4.268-hardened1 2024-01-29 09:44:08 +01:00
Fabián Heredia Montiel
503d0f65a7 linux/hardened/patches/5.15: 5.15.147-hardened1 -> 5.15.148-hardened1 2024-01-29 09:44:08 +01:00
Fabián Heredia Montiel
ed540a7c8e linux/hardened/patches/5.10: 5.10.208-hardened1 -> 5.10.209-hardened1 2024-01-29 09:44:08 +01:00
Fabián Heredia Montiel
114b7a4a3b linux/hardened/patches/4.19: 4.19.305-hardened1 -> 4.19.306-hardened1 2024-01-29 09:44:08 +01:00
Jacek Galowicz
3dbf54decb nixos-rebuild: Fix "too long for Unix domain socket" errors due to long
TMPDIR
2024-01-29 06:27:30 +01:00
R. Ryantm
9e67b4305c intel-compute-runtime: 23.43.27642.18 -> 23.48.27912.11 2024-01-29 00:21:45 +00:00
github-actions[bot]
1a9dbf110b
Merge staging-next into staging 2024-01-29 00:02:49 +00:00
R. Ryantm
6b47b1113f rdma-core: 49.1 -> 50.0 2024-01-28 20:40:01 +00:00
Joachim F
6dd56e1483
Merge pull request #275579 from tamara-schmitz/master
update hardened profile to new recommendations
2024-01-28 20:25:27 +01:00
Sandro
f35ab6dee7
Merge pull request #230368 from risicle/ris-libbpf-passthru-tests
libbpf: add some key reverse dependencies to `passthru.tests`
2024-01-28 19:14:27 +01:00
github-actions[bot]
229c36bdcb
Merge staging-next into staging 2024-01-28 18:01:42 +00:00
Yureka
feca0eecd1
systemd: update musl patches for v255 (#284136) 2024-01-28 14:12:00 +01:00
Mario Rodas
d78238fc08
Merge pull request #283700 from r-ryantm/auto-update/fwts
fwts: 23.11.00 -> 24.01.00
2024-01-28 08:03:56 -05:00
github-actions[bot]
5e17795097
Merge staging-next into staging 2024-01-28 12:01:36 +00:00
Alyssa Ross
63c01a3576 linux_6_7: fix Rust support with current rustc
The 1.75 patch can't be fetched, because it doesn't apply.  But git
can apply it cleanly, so it must just need to do a three-way merge or
something.  Regardless, we need to include a version that patch(1) can
apply in Nixpkgs.
2024-01-28 10:54:17 +01:00
Weijia Wang
bbe271c236
Merge pull request #282193 from r-ryantm/auto-update/setools
setools: 4.4.1 -> 4.4.4
2024-01-28 07:53:38 +01:00
Weijia Wang
03e3e91dfb setools: fix runtime error 2024-01-28 07:18:15 +01:00
R. Ryantm
ab63839a5d setools: 4.4.1 -> 4.4.4 2024-01-28 07:17:57 +01:00
Tamara Schmitz
b80c3284d5
nixos/hardened: update hardened profile to new recommendations
Borrowing from here to match hardened profile with more recent kernels:
* https://madaidans-insecurities.github.io/guides/linux-hardening.html?#boot-parameters
* https://github.com/a13xp0p0v/kernel-hardening-checker/

Removed "slub_debug" as that option disables kernel memory address
hashing. You also see a big warning about this in the dmesg:
"This system shows unhashed kernel memory addresses via the console, logs, and other interfaces."

"init_on_alloc=1" and "init_on_free=1" zeroes all SLAB and SLUB allocations. Introduced in 6471384af2a6530696fc0203bafe4de41a23c9ef. Also the default for the Android Google kernel btw. It is on by default through the KConfig.

"slab_nomerge" prevents the merging of slab/slub caches. These are
effectively slab/slub pools.

"LEGACY_VSYSCALL_NONE" disables the older vsyscall mechanic that relies on
static address. It got superseeded by vdsos a decade ago. Read some
LWN.net to learn more ;)

"debugfs=off" I'm sure there are some few userspace programs that rely on
debugfs, but they shouldn't.

Most other things mentioned on the blog where already the default on a
running machine or may not be applicable.

Most other Kconfigs changes come from the kernel hardening checker and
were added, when they were not applied to the kernel already.

Unsure about CONFIG_STATIC_USERMODEHELPER. Would need testing.
2024-01-27 20:43:58 +00:00
Weijia Wang
4354538139 Merge branch 'staging-next' into staging 2024-01-27 04:17:36 +01:00
Jerry Starke
944aef9fb7 linuxKernel.kernels.linux_lqx: 6.7.1-lqx1 -> 6.7.2-lqx1 2024-01-26 22:17:51 +01:00
Jerry Starke
3390aa1aed linuxKernel.kernels.linux_zen: 6.7.1-zen1 -> 6.7.2-zen1 2024-01-26 22:16:32 +01:00
Kiskae
2817ffc8e1 linuxPackages_latest.nvidiaPackages.{latest,vulkan_beta}.open: broken on 6.7 2024-01-26 18:05:51 +01:00
Maximilian Bosch
76a02cdd4b
Merge pull request #283679 from r-ryantm/auto-update/cryptsetup
cryptsetup: 2.6.1 -> 2.7.0
2024-01-26 16:56:49 +01:00
R. Ryantm
3f5f020da5 pcm: 202311 -> 202401 2024-01-26 16:41:12 +01:00
Maximilian Bosch
704180bbbb
Merge pull request #283883 from alyssais/linux-5.10.209
Linux kernels 2024-01-25
2024-01-26 12:12:47 +01:00
Nick Cao
6620368452
Merge pull request #283804 from Kiskae/nvidia/535.43.23
linuxPackages.nvidiaPackages.vulkan_beta: 535.43.22 -> 535.43.23
2024-01-25 22:10:36 -05:00