Commit Graph

53993 Commits

Author SHA1 Message Date
aszlig
3e49487c1a
virtualbox: Enable hardening by default.
VirtualBox with hardening support requires the main binaries to be
setuid root. Using VBOX_WITH_RUNPATH, we ensure that the RPATHs are
pointing to the libexec directory and we also need to unset
VBOX_WITH_ORIGIN to make sure that the build system is actually setting
those RPATHs.

The hardened.patch implements two things:

 * Set the binary directory to the setuid-wrappers dir so that
   VboxSVC calls them instead of the binaries from the store path. The
   reason behind this is because nothing in the Nix store can have the
   setuid flag.
 * Excempt /nix/store from the group permission check, because while it
   is group-writeable indeed it also has the sticky bit set (and also
   the whole store is mounted read-only on most NixOS systems), so we're
   checking on that as well.

Right now, the hardened.patch uses /nix/store and /var/setuid-wrappers
directly, so someone would ever want to change those on a NixOS system,
please provide a patch to set those paths on build time. However, for
simplicity, it's best to do it when we _really_ need it.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2014-11-29 19:21:46 +01:00
aszlig
deec767efa
virtualbox: Disable depmod only where necessary.
Traversing the full source tree is unneccessary, because the calls are
only done within make files. Hence we only substitute make files now.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2014-11-29 19:21:46 +01:00
Tom Fitzhenry
0ba024ac9f ino: Use picocom rather than minicom 2014-11-29 17:55:41 +00:00
Sivaram Balakrishnan
06d4503300 add hask, the haskell package 2014-11-29 23:07:02 +05:30
Ryan Newton
2a1993d4ec haskell: add chaselev-deque 2014-11-29 11:18:45 -05:00
Jaka Hudoklin
8c766dcc90 nixos/kubernetes: fix user id 2014-11-29 16:46:39 +01:00
Jaka Hudoklin
bd32da69bc Merge pull request #5088 from offlinehacker/nixos/kubernetes
nixos: add kubernetes module
2014-11-29 16:44:42 +01:00
Pascal Wittmann
5dd9d2d342 llpp: update to latest revision, uses now the ninja build system 2014-11-29 14:21:16 +01:00
Pascal Wittmann
f063a0a245 lablgl: place libs correctly 2014-11-29 14:21:16 +01:00
Pascal Wittmann
faf6e067d1 add mujs, a lightweight, embeddable Javascript interpreter 2014-11-29 14:21:16 +01:00
Thomas Hunger
683a3bbc62 Update matplotlib to 1.4.2.
matplotlib acquired two new dependencies: mock for testing
and pytz for rendering.
2014-11-29 11:38:04 +00:00
muflax
5fd15e31b0 ccl: fix paths to coreutils 2014-11-29 06:14:53 +00:00
Jaka Hudoklin
88d4ae98ae Merge pull request #5168 from pmahoney/skarnet-refactor
Skarnet refactor
2014-11-29 02:48:06 +01:00
Jaka Hudoklin
c35844aa2d etcd: update to 0.5.0-alpha.4 2014-11-29 02:27:25 +01:00
Jaka Hudoklin
82e40a2820 kubernetes: update to 0.5.4 2014-11-29 02:27:25 +01:00
Jaka Hudoklin
2b261c1edf nixos: add kubernetes module 2014-11-29 02:27:17 +01:00
Ricardo M. Correia
d4b4bae307 Update my maintainership 2014-11-29 02:15:39 +01:00
Ricardo M. Correia
a83eb0f2a1 rustcMaster: Update from 0.12.0-pre-1336-g394269d -> 0.12.0-pre-1635-g29e928f 2014-11-29 02:04:55 +01:00
Pascal Wittmann
7ea250ff3b Merge pull request #5171 from iu-parfunc/lattices
haskell: add lattices package
2014-11-28 23:14:51 +01:00
Joachim Fasting
9f9744f6d6 haskell-grid: new expression
Test-suite fails to compile, set doCheck=false.
2014-11-28 23:11:39 +01:00
Cillian de Róiste
ad17d36de6 libsmf: fix build 2014-11-28 22:39:09 +01:00
Ryan Newton
f5834013fc haskell: add thread-local-storage package 2014-11-28 15:32:56 -05:00
Ryan Newton
0b65ed3b35 haskell: add lattices package 2014-11-28 15:25:49 -05:00
Patrick Mahoney
a61293e659 skarnet: Invoke compile as 'cc' for wider support.
Darwin stdenv uses clang, which can be invoked as 'cc' but not 'gcc'.
2014-11-28 13:11:36 -06:00
Patrick Mahoney
cf5f282940 Consolidate conf-compile steps for skarnet.org pkgs. 2014-11-28 13:10:37 -06:00
aszlig
c37611f3e5
nixos: Use vendor zones instead of N.pool.ntp.org.
Closes #4824, thanks to @abh for processing my stupidity.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2014-11-28 19:37:03 +01:00
Vladimir Still
f9c96df1d5 libc++abi: Fix importing includes from libc++.
And add myself to maintainers. Close #5167.
2014-11-28 18:56:15 +01:00
Cillian de Róiste
650226e3c4 libsmf: fix the sha256 hash 2014-11-28 14:14:10 +00:00
cillianderoiste
d7174debe3 Merge pull request #5141 from magnetophon/xrandr-invert-colors
xrandr-invert-colors, a tool to invert the colors of your screen
2014-11-28 12:57:30 +00:00
Bart Brouns
9bcf0178d6 xrandr-invert-colors, a tool to invert the colors of your screen 2014-11-28 13:39:01 +01:00
Arseniy Seroka
c1985405cc Merge pull request #5152 from manveru/neovim
add neovim
2014-11-28 14:36:53 +03:00
Pascal Wittmann
a94da8c44c checkstyle: update from 6.1 to 6.1.1 2014-11-28 11:08:13 +01:00
Pascal Wittmann
4261ab39a8 nzbget: update from 14.0 to 14.1 2014-11-28 11:08:12 +01:00
Pascal Wittmann
02ca1adc05 groovy: update from 2.3.7 to 2.3.8 2014-11-28 11:08:12 +01:00
Pascal Wittmann
457d56fcec calibre: update from 2.11.0 to 2.12.0 2014-11-28 11:08:12 +01:00
cillianderoiste
98f3e185f2 Merge pull request #5137 from magnetophon/faustPlusCompiler
Faust plus compiler
2014-11-28 09:42:04 +00:00
cillianderoiste
d2a1867a20 Merge pull request #5157 from magnetophon/sselp
sselp prints X selection to standard out
2014-11-28 09:33:44 +00:00
William A. Kennington III
299b59d1c4 nixos/network-interfaces: More fixes 2014-11-27 22:54:01 -08:00
William A. Kennington III
0f711225d4 boost: Pin packages to 1.56 2014-11-27 22:06:02 -08:00
William A. Kennington III
dc16b7cbb6 boost: Make 1.57 the default 2014-11-27 22:06:01 -08:00
Mateusz Kowalczyk
456312a5fc youtube-dl: update to 2014.11.27 2014-11-28 02:31:01 +00:00
Cillian de Róiste
e9ec3ea1f2 Add drumgizmo, an LV2 sample based drum plugin 2014-11-28 00:35:23 +01:00
Arseniy Seroka
fa018cd9b0 Merge pull request #5161 from muflax/clozure
ccl: 1.8 -> 1.10 (reapply after false revert)
2014-11-28 01:49:44 +03:00
muflax
856e5839e1 ccl: 1.8 -> 1.10 (reapply after false revert) 2014-11-27 22:48:07 +00:00
Arseniy Seroka
a68b596aa8 Merge pull request #5159 from NixOS/revert-5148-clozure
Revert "ccl: 1.8 -> 1.10"
2014-11-28 01:35:09 +03:00
Arseniy Seroka
52ea3bb61f Revert "ccl: 1.8 -> 1.10" 2014-11-28 01:34:54 +03:00
Arseniy Seroka
860452f3f9 Merge pull request #5148 from muflax/clozure
ccl: 1.8 -> 1.10
2014-11-28 01:34:26 +03:00
muflax
3c7ac9db06 ccl: 1.8 -> 1.10 2014-11-27 22:33:21 +00:00
Cillian de Róiste
dae0611770 pidginotr: update from 4.0.0 to 4.0.1 2014-11-27 22:59:34 +01:00
Michael Fellinger
917bf6865a add neovim 2014-11-27 22:16:43 +01:00