Commit Graph

4492 Commits

Author SHA1 Message Date
Asko Soukka
da79b5305e pam_u2f: 1.0.1 -> 1.0.4 2016-01-29 20:49:29 +02:00
Vladimír Čunát
4824f73cb3 linux-4.2: remove as it's no longer maintained upstream
grsecurity still holds a reference to it,
but I prefer it to fail than to use a version
that is most likely not secure anymore.
2016-01-20 20:15:07 +01:00
Nathan Zadoks
23f5e3c90f linux: patch CVE-2016-0728 (close #12492)
The PoC provided successfully escalates privileges from a local user to
root. The vulnerability affects any Linux Kernel version 3.8 and higher.
http://perception-point.io/2016/01/14/analysis-and-exploitation-of-a-linux-kernel-vulnerability-cve-2016-0728/
2016-01-20 09:31:53 +01:00
Guillaume Maudoux
f8ff4691ed linux-mptcp: init at 0.90 (kernel 3.18.20), fixes #11149 2016-01-20 02:11:09 +01:00
Tuomas Tynkkynen
69ba6c1d30 mmc-utils: init at 2015-11-18, fixes #12489 2016-01-20 01:50:34 +01:00
Ricardo M. Correia
d51204e8de zfs: 0.6.5.3 -> 0.6.5.4 2016-01-19 16:34:14 +01:00
Ricardo M. Correia
fe53cb56d9 spl: 0.6.5.3 -> 0.6.5.4 2016-01-19 16:34:14 +01:00
Vladimír Čunát
72e6e6a483 tarball: fix evaluation of mdadm on darwin
It probably doesn't make any sense to have mdadm on darwin,
but we have to "fail in a right way".
2016-01-18 15:05:38 +01:00
aszlig
011c149ed5
mdadm: Set allowedReferences to only include libc.
The updates we had in the past (7719f7f and 1faf610) broke the mdadm
installer test and systems in the wild using mdraid because newer mdadm
versions contained a self-referenc to its own store path.

Instead of putting a big warning about updating in the package
expression, let's just add allowedReferences so the build immediately
fails if there is a self-reference.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-01-18 04:21:16 +01:00
aszlig
5e227e6f1d
mdadm: Clean up package expression.
Let's use makeFlags directly instead of stitching together a
makeFlagsArray in preBuild.

This should make the expression much more readable and clean.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-01-18 04:21:16 +01:00
aszlig
bcd31d0acb
mdadm: 3.3 -> 3.3.4
Okay, this update is a bit more tricky and the patch I've included is
not very nice to be honest.

So the patch causes "mdadm --udev-rules" to search for the right store
path using /proc/self/exec. This has the disadvantage that we could end
up having /run/current-system/bin/mdadm in the rule file.

But on the other hand, when we're on NixOS, we don't need to use that
command *at*all*, so we should be safe.

The patch also sets BINDIR to /sbin, which causes the included rule and
systemd files to not work out of the box on NixOS. But we have a
substituteInPlace where we do rewrite /sbin/mdadm to the right store
path in our udev rule generator, so that shouldn't be an issue.

I've tested this using the mdraid installer test and it succeeded.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-01-18 04:21:15 +01:00
koral
dd4dd8c87a conky: 1.10.0 -> 1.10.1 2016-01-17 11:22:10 +01:00
Pascal Wittmann
edeaa7d26c linuxConsoleTools: 1.4.8 -> 1.4.9 2016-01-15 21:36:23 +01:00
Simon Jagoe
42d4175e4e kernel: 4.1.13 -> 4.1.15 (close #12408) 2016-01-15 19:59:52 +01:00
Svein Ove Aas
805d453bc2 nvidia: branch update 352.63 -> 358.16 (close #12272)
Tested & reviewed by vcunat:
- the patch seems not needed anymore,
- reflects changes in their build system
  ftp://download.nvidia.com/XFree86/packaging/linux/new-kbuild-for-355/README
2016-01-14 12:32:53 +01:00
Nikolay Amiantov
957b09d61a android-udev-rules: 20151108 -> 20151209 2016-01-13 21:21:43 +03:00
lethalman
e1eea5ad7f Merge pull request #12360 from kragniz/powertop-v2.8
powertop: 2.7 -> 2.8
2016-01-13 14:18:52 +01:00
Louis Taylor
6ac550a3e9 powertop: 2.7 -> 2.8
Removed patch, since an equivalent fix was made upstream and included in
the 2.8 release.
2016-01-13 12:06:33 +00:00
Louis Taylor
2dd99b8abb kmod: 21 -> 22 2016-01-13 11:46:15 +00:00
Tobias Geerinckx-Rice
5904738557 regionset: 20030629 -> 0.2
Later version with cleaned-up code and a very basic man page.
2016-01-13 03:30:56 +01:00
Shea Levy
44274f62f5 linux: Add 4.4 2016-01-12 19:39:00 -05:00
Lluís Batlle i Rossell
1792ca5810 Increasing mmc possible partitions from 8 to 32.
In kernel common config. I have a modern tablet with 18 gpt partitions
on eMMC (Android+Win10 dualboot).
2016-01-11 09:27:58 +01:00
Tim Steinbach
f318049964 kernel: 4.3.2 -> 4.3.3 2016-01-11 02:08:31 +00:00
Tobias Geerinckx-Rice
228774aaf5 wis_go7007: remove dead package & module
Broken since 2014, but basically a package from 2008 with no
upstream.
2016-01-11 00:16:01 +01:00
Aristid Breitkreuz
6fc1c08324 Merge pull request #12143 from NeQuissimus/kernel440rc8
linux-testing: 4.4.0-rc7 -> 4.4.0-rc8
2016-01-10 21:07:46 +01:00
Aristid Breitkreuz
9c92faf370 Merge pull request #12133 from dwe11er/new-package/irqbalance
irqbalance: init at 1.1.0
2016-01-10 21:06:50 +01:00
Vladimír Čunát
3769692a38 iptables: add in-code warning about updates
/cc #12178.
2016-01-08 18:32:48 +01:00
Marcin Falkiewicz
7636359c89 irqbalance: init at 1.1.0 2016-01-08 12:37:43 +01:00
Eelco Dolstra
f9cf253e61 Merge pull request #12178 from mdorman/revert-iptables
Revert "iptables: 1.4.21 -> 1.6.0"
2016-01-08 10:45:53 +01:00
Shea Levy
57e0febda6 Merge branch 'pkg/batman-adv-2015.2' of git://github.com/mayflower/nixpkgs 2016-01-07 14:37:50 -05:00
Shea Levy
025770fdd9 Merge branch 'pkg/netatop-0.7' of git://github.com/mayflower/nixpkgs 2016-01-07 14:36:51 -05:00
Lluís Batlle i Rossell
be9ad574f7 Adding framebuffer console rotation to kernels.
This helps in some weird screens that otherwise show the console 90° turned.
2016-01-07 16:48:46 +01:00
Franz Pletz
7f144d8f09 batman-adv: 2014.4.0 -> 2015.2 2016-01-07 16:25:46 +01:00
Franz Pletz
bcd31489a1 netatop: 0.3 -> 0.7 2016-01-07 16:25:02 +01:00
Eelco Dolstra
e4b4e9b986 linux: Make Unix domain sockets builtin
This hopefully fixes intermittent initrd failures where udevd cannot
create a Unix domain socket:

  machine# running udev...
  machine# error getting socket: Address family not supported by protocol
  machine# error initializing udev control socket
  machine# error getting socket: Address family not supported by protocol

The "unix" kernel module is supposed to be loaded automatically, and
clearly that works most of the time, but maybe there is a race
somewhere. In any case, no sane person would run a kernel without Unix
domain sockets, so we may as well make it builtin.

http://hydra.nixos.org/build/30001448
2016-01-07 13:20:53 +01:00
Michael Alan Dorman
fe00c8a83f Revert "iptables: 1.4.21 -> 1.6.0"
This reverts commit b2ac241e95, which
upgraded iptables, because it causes connmand to segfault on my machine:

    Jan 05 22:02:06 aching connmand[7866]: Connection Manager version 1.30
    Jan 05 22:02:06 aching audit: NETFILTER_CFG table=filter family=2 entries=27
    Jan 05 22:02:06 aching audit[7866]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=a a1=0 a2=40 a3=103a5b0 items=0 ppid=1 pid=7866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="connmand" exe="/nix/store/x7lyis4srvd68lflgnqqmg2bc1fm2whb-connman-1.30/bin/connmand" key=(null)
    Jan 05 22:02:06 aching audit: PROCTITLE proctitle=2F6E69782F73746F72652F78376C796973347372766436386C666C676E71716D6732626331666D327768622D636F6E6E6D616E2D312E33302F7362696E2F636F6E6E6D616E64002D2D636F6E6669673D2F6E69782F73746F72652F37383078797137726367376766306271706A3130306C666238336B69367938762D636F6E6E
    Jan 05 22:02:06 aching audit: NETFILTER_CFG table=mangle family=2 entries=6
    Jan 05 22:02:06 aching audit[7866]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=a a1=0 a2=40 a3=1038c00 items=0 ppid=1 pid=7866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="connmand" exe="/nix/store/x7lyis4srvd68lflgnqqmg2bc1fm2whb-connman-1.30/bin/connmand" key=(null)
    Jan 05 22:02:06 aching audit: PROCTITLE proctitle=2F6E69782F73746F72652F78376C796973347372766436386C666C676E71716D6732626331666D327768622D636F6E6E6D616E2D312E33302F7362696E2F636F6E6E6D616E64002D2D636F6E6669673D2F6E69782F73746F72652F37383078797137726367376766306271706A3130306C666238336B69367938762D636F6E6E
    Jan 05 22:02:06 aching audit: NETFILTER_CFG table=nat family=2 entries=5
    Jan 05 22:02:06 aching audit[7866]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=a a1=0 a2=40 a3=1037800 items=0 ppid=1 pid=7866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="connmand" exe="/nix/store/x7lyis4srvd68lflgnqqmg2bc1fm2whb-connman-1.30/bin/connmand" key=(null)
    Jan 05 22:02:06 aching audit: PROCTITLE proctitle=2F6E69782F73746F72652F78376C796973347372766436386C666C676E71716D6732626331666D327768622D636F6E6E6D616E2D312E33302F7362696E2F636F6E6E6D616E64002D2D636F6E6669673D2F6E69782F73746F72652F37383078797137726367376766306271706A3130306C666238336B69367938762D636F6E6E
    Jan 05 22:02:06 aching connmand[7866]: Aborting (signal 11) [/nix/store/x7lyis4srvd68lflgnqqmg2bc1fm2whb-connman-1.30/sbin/connmand]
    Jan 05 22:02:06 aching connmand[7866]: ++++++++ backtrace ++++++++
    Jan 05 22:02:06 aching connmand[7866]: +++++++++++++++++++++++++++
    Jan 05 22:02:06 aching systemd[1]: connman.service: Main process exited, code=exited, status=1/FAILURE
    Jan 05 22:02:06 aching systemd[1]: connman.service: Unit entered failed state.
    Jan 05 22:02:06 aching systemd[1]: connman.service: Failed with result 'exit-code'.
    Jan 05 22:02:06 aching systemd[1]: connman.service: Service hold-off time over, scheduling restart.
    Jan 05 22:02:06 aching systemd[1]: Stopped Connection service.

Arrived at through bisection, verified using this commit.
2016-01-06 06:24:42 -05:00
Tobias Geerinckx-Rice
9f2a7bf862 mcelog: 128 -> 129
Add support to decode MSCOD values for Broadwell-{de,ep,ex}.
2016-01-05 20:22:35 +01:00
Eelco Dolstra
49f46d58bb Merge pull request #12160 from obadz/syscall_limiter
syscall_limiter: init at b02c03
2016-01-05 16:52:02 +01:00
obadz
f5b087b94e syscall_limiter: init at b02c031 2016-01-05 15:37:17 +00:00
Bjørn Forsman
38d115bc71 guvcview: add pulseaudioSupport option (default true) 2016-01-05 11:54:47 +01:00
Bjørn Forsman
e753f795e2 guvcview: 1.7.2 -> 2.0.2
* Download tarball instead of git repo, drop autoreconfHook.
* The application now needs SDL2 instead of SDL.
* The build failed without 'gsl', so add that. (I think ./configure can
  be told to build without it, but it's only 5.7 MiB.)
2016-01-05 11:54:46 +01:00
Tim Steinbach
1283e01b38 linux-testing: 4.4.0-rc7 -> 4.4.0-rc8 2016-01-04 20:52:19 +00:00
Tobias Geerinckx-Rice
5606e8b043 uksmtools: add 1-line comment to clarify fetchgit use... 2016-01-04 04:07:33 +01:00
Pascal Wittmann
1d2bb7ddfc Merge pull request #12111 from dezgeg/pr-i2ctools-source
i2c-tools: Fetch source from debian
2016-01-03 19:37:05 +01:00
Tuomas Tynkkynen
a9b83b5643 i2c-tools: Fetch source from debian
lm-sensors.org has been down for a while now.
2016-01-03 19:34:37 +02:00
aszlig
7ea34af4dd
linux-testing: 4.4.0-rc6 -> 4.4.0-rc7
Upstream changes can be found at:

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/log/?id=v4.4-rc7

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-01-02 17:56:03 +01:00
leenaars
3bd03f3141 xf86-input-wacom: 0.31.0 -> 0.32.0 2016-01-01 14:16:32 +01:00
Michael Raskin
b2ac241e95 iptables: 1.4.21 -> 1.6.0 2016-01-01 12:30:17 +03:00
Michael Raskin
0f9a361064 firejail: 0.9.26 -> 0.9.36 2016-01-01 12:30:17 +03:00
Michael Raskin
5db11e97e7 conspy: 1.10 -> 1.13 2016-01-01 12:30:17 +03:00