Commit graph

2329 commits

Author SHA1 Message Date
Rickard Nilsson a927709a35 openssh: Use the default privilege separation dir (/var/empty)
If running NixOS inside a container where the host's root-owned files
and directories have been mapped to some other uid (like nobody), the
ssh daemon fails to start, producing this error message:

fatal: /nix/store/...-openssh-7.2p2/empty must be owned by root and not group or world-writable.

The reason for this is that when openssh is built, we explicitly set
`--with-privsep-path=$out/empty`. This commit removes that flag which
causes the default directory /var/empty to be used instead. Since NixOS'
activation script correctly sets up that directory, the ssh daemon now
also works within containers that have a non-root-owned nix store.
2016-07-14 20:54:06 +02:00
zimbatm dc6306a69d zerotierone: 1.1.6 -> 1.1.12 2016-07-14 14:02:54 +01:00
Ioannis Koutras d861911263 ocproxy: init at 1.50 2016-07-13 17:15:23 +03:00
Robert Helgesson c9b9619636 nethogs: 0.8.1 -> 0.8.5 2016-07-13 13:17:24 +02:00
Arseniy Seroka a7f87bd518 Merge pull request #16904 from womfoo/fix-bump/smbldaptools-0.9.11
smbldaptools: 0.9.10 -> 0.9.11
2016-07-13 14:52:07 +04:00
Kranium Gikos Mendoza d5e70a2adc smbldaptools: 0.9.10 -> 0.9.11 2016-07-13 09:01:25 +08:00
joachifm 3df7f3cbc3 Merge pull request #16831 from womfoo/fix-bump/gtkgnutella-1.1.9
gtk-gnutella: fix build and 1.1.5 -> 1.1.9
2016-07-12 16:21:36 +02:00
joachifm 7a54a71c9e Merge pull request #16808 from 4z3/urlwatch
urlwatch: 2.1 -> 2.2
2016-07-12 16:20:17 +02:00
Gabriel Ebner 51e1b2508c Merge pull request #16878 from womfoo/bump/siege-4.0.2
siege: 4.0.1 -> 4.0.2
2016-07-12 08:23:15 +02:00
Kranium Gikos Mendoza e54223e8bb siege: 4.0.1 -> 4.0.2 2016-07-12 13:31:31 +08:00
Gabriel Ebner ad41b8fa19 mu: fix build of webkit support and re-enable it 2016-07-11 10:37:31 +02:00
Jookia ba2232f1f2 srelay: init at 0.4.8b6 (#16833) 2016-07-11 03:41:02 +02:00
Franz Pletz bdf4c0d21f ntp: 4.2.8p6 -> 4.2.8p8 (security)
Fixes CVE-2016-4953, CVE-2016-4954, CVE-2016-4955, CVE-2016-4956.
2016-07-10 10:48:11 +02:00
Franz Pletz 033e593a4f dnsmasq: 2.75 -> 2.76 (security)
Fixes CVE-2015-8899.
2016-07-10 10:48:10 +02:00
Franz Pletz b8ecb949e6 haproxy: 1.6.5 -> 1.6.6 (security)
Fixes at least CVE-2016-5360.
2016-07-10 10:46:22 +02:00
Franz Pletz f1f6dc9b87 shadowsocks-libev: polarssl is now called mbedtls 2016-07-10 10:26:14 +02:00
Kranium Gikos Mendoza f854c7d4f4 gtk-gnutella: 1.1.5 -> 1.1.9 2016-07-10 11:21:28 +08:00
Matthias Beyer 340a5d6fbf openvpn: 2.3.10 -> 2.3.11
Taken from #15856.
2016-07-09 15:04:55 +02:00
Miguel Madrid 57e1a6c48d traceroute: 2.0.21 -> 2.1.0 (#16809) 2016-07-09 14:40:14 +02:00
tv 93b246287b urlwatch: 2.1 -> 2.2 2016-07-09 12:16:30 +02:00
Rahul Gopinath 27a9ef8709 mailutils: fix build break
See #14606 for the breakage. It is fixed by using default guile 2.0
Also addes support for fribidi, sasl, and gssapi
2016-07-03 22:50:39 -07:00
zimbatm 17d6abb771 Merge pull request #16676 from mpscholten/maphosts2
maphosts: Don't provide bundler anymore
2016-07-03 18:10:33 +01:00
Marc Scholten a11f780274 maphosts: Don't provide bundler anymore 2016-07-03 17:59:23 +02:00
Joachim Fasting 291c454d5e Merge pull request #16594 from mpscholten/maphosts2
maphosts: init at 1.1.1
2016-07-02 14:05:09 +02:00
Daniel Fullmer 3f4f3c4005 zerotierone: 1.1.4 -> 1.1.6 2016-06-29 21:45:40 -04:00
Marc Scholten 479c08750a maphosts: init at 1.1.1 2016-06-29 13:31:54 +02:00
Franz Pletz 85d0570d14 haproxy: 1.6.4 -> 1.6.5 2016-06-27 00:11:16 +02:00
Franz Pletz 815d2a0583 iperf3: 3.1 -> 3.1.3 2016-06-27 00:11:16 +02:00
obadz e13a76f978 Merge pull request #16467 from groxxda/bump/networkmanager
networkmanager: cleanup
2016-06-23 23:41:44 +01:00
obadz 24520af0fa network-manager/l2tp: remove workaround that's now in main repo 2016-06-23 23:35:43 +01:00
Alexander Ried a6a11b3852 network-manager-applet: remove unused dbus_glib dependency 2016-06-23 23:12:41 +02:00
Alexander Ried 64a9dc4dd7 networkmanager: cleanup 2016-06-23 23:12:41 +02:00
Alexander Ried c1319572d4 networkmanager: Dependency on avahi-autoipd has been dropped.
Native IPv4 link-local addressing configuration based on systemd network library is now used instead.
2016-06-23 23:12:41 +02:00
obadz a709f60d7b networkmanager/l2tp: fix format error on x86/32bit 2016-06-23 12:32:59 +01:00
zimbatm b0487cb402 Merge pull request #16408 from arpa2/unbound
unbound: 1.5.8 -> 1.5.9
2016-06-22 21:44:54 +01:00
Joachim Fasting 1d98608e43 Merge pull request #16362 from womfoo/aria2
aria2: 1.23.0 -> 1.24.0
2016-06-22 19:04:18 +02:00
obadz f540e09a8b Merge pull request #16412 from obadz/networkmanager-1.2
NetworkManager & plugins: upgrade to 1.2
2016-06-22 15:12:23 +01:00
obadz a9e995d679 network-manager & plugins: no longer remove -Werror and friends
Code using deprecated APIs has been removed
See comment by @dkosovic on the matter:
https://github.com/xelerance/xl2tpd/issues/108#issuecomment-227621314
2016-06-22 03:16:20 +01:00
obadz 2cf9b5a6c0 network-manager/vpnc: 1.0.12 -> 1.2.2 2016-06-22 03:16:20 +01:00
obadz f337c2cf9c network-manager/openconnect: 1.0.2 -> 1.2.2 2016-06-22 03:16:20 +01:00
obadz 9f3e2af9fe network-manager/openvpn: 1.0.12 -> 1.2.2 2016-06-22 03:16:20 +01:00
obadz a8074165ef network-manager/l2tp: 0.9.8.7 -> 1.2.2 2016-06-22 03:16:19 +01:00
obadz c434fd0659 network-manager/pptp: 1.0.12 -> 1.2.2 2016-06-22 03:16:19 +01:00
obadz 325f9e966d network-manager-applet: 1.0.10 -> 1.2.2 2016-06-22 03:16:19 +01:00
obadz 233541a371 network-manager: 1.0.12 -> 1.2.2 2016-06-22 03:16:12 +01:00
obadz 925fb7ebfc network-manager: move 0.9.8 to its own directory 2016-06-22 02:35:22 +01:00
obadz b7731e446a network-manager/l2tp: replace patch by substitutions to simplify upgrades 2016-06-22 02:33:39 +01:00
obadz 9191f09c05 network-manager/pptp: replace patch by substitutions to simplify upgrades 2016-06-22 02:33:39 +01:00
Michiel Leenaars f125db1c60 unbound: 1.5.8 -> 1.5.9 2016-06-21 23:22:18 +02:00
Edward Tjörnhammar f3950f712f
i2pd: 2.7.0 -> 2.8.0
Signed-off-by: Edward Tjörnhammar <ed@cflags.cc>
2016-06-21 15:03:59 +02:00