Commit Graph

3911 Commits

Author SHA1 Message Date
obadz
231ed9edd9 chromium: split the sandbox into a separate output
Related to #17460 and 66d5edf
Triggers a rebuild of Chromium
2016-08-06 10:29:56 +01:00
obadz
66d5edf654 chromium: add nixos module security.chromiumSuidSandbox
Closes #17460

Changed the wrapper derivation to produce a second output containing the sandbox.
Add a launch wrapper to try and locate the sandbox (either in /var/setuid-wrappers or in /nix/store).
This launch wrapper also sheds libredirect.so from LD_PRELOAD as Chromium does not tolerate it.

Does not trigger a Chromium rebuild.

cc @cleverca22 @joachifm @jasom
2016-08-06 10:27:47 +01:00
Robin Gloster
19158a60cf Merge pull request #17541 from womfoo/bump/wraith-1.4.7
wraith: 1.4.6 -> 1.4.7, fixes build
2016-08-05 19:04:02 +02:00
Kranium Gikos Mendoza
9470b28743 wraith: 1.4.6 -> 1.4.7 2016-08-06 00:05:40 +08:00
obadz
d6528a1b7f chromium: fixup commit 33557ac
Helps with #17460

@cleverca22 saw calls to SetuidSandboxHost::GetSandboxBinaryPath so we
patch this function instead.

cc @joachifm
2016-08-05 10:55:48 +01:00
obadz
33557acb36 chromium: add ability to control which sandbox is used
First step towards addressing #17460

In order to be able to run the SUID sandbox, which is good for security
and required to run Chromium with any kind of reasonable sandboxing when
using grsecurity kernels, we want to be able to control where the
sandbox comes from in the Chromium wrapper. This commit patches the
appropriate bit of source and adds the same old sandbox to the wrapper
(so it should be a no-op)
2016-08-04 20:37:35 +01:00
Benjamin Staffin
78e5e61bbe Update google-chrome versions
The previous download links were all broken.

Stable: 51.0.2704.103 -> 52.0.2743.116
Beta:   52.0.2743.41  -> 53.0.2785.34
Dev:    53.0.2767.4   -> 54.0.2816.0
2016-08-04 00:22:58 -04:00
Hector A. Escobedo
594256c3a8 purple-matrix: init at 2016-07-11 2016-08-03 15:46:28 -04:00
Rok Garbas
2a4312d92b
firefox-beta-bin: 48.0b9 -> 49.0b1 2016-08-03 19:39:46 +02:00
mimadrid
4a06ece723
qutebrowser: 0.8.1 -> 0.8.2 2016-08-03 11:02:02 +02:00
zimbatm
2f791c7444 terraform: 0.6.16 -> 0.7.0 2016-08-03 09:53:20 +01:00
Luca Bruno
2cce7a064e telepathy_salut: fix build, add myself as maintainer 2016-08-02 22:00:24 +02:00
Tuomas Tynkkynen
21f17d69f6 treewide: Add lots of meta.platforms
Build-tested on x86_64 Linux & Mac.
2016-08-02 21:42:43 +03:00
Tuomas Tynkkynen
63de40099f treewide: Move some meta sections to end-of-file
That seems to be the overwhelming convention.
2016-08-02 21:17:44 +03:00
Tuomas Tynkkynen
2258b21e4b treewide: Add lots of platforms to packages with no meta
Build-tested on x86_64 Linux and on Darwin.
2016-08-02 21:17:44 +03:00
Tuomas Tynkkynen
59ce911810 treewide: Some EOF-whitespace fixes 2016-08-02 21:17:44 +03:00
taku0
47024938a2 firefox-bin: 47.0.1 -> 48.0 (#17452) 2016-08-02 16:55:55 +02:00
Benno Fünfstück
2c7b5ac8a9 notmuch-mutt: drop unused fetchurl parameter 2016-08-02 11:45:42 +02:00
Benno Fünfstück
58afc252e4 notmuch-mutt: remove unused parameter 2016-08-02 11:39:50 +02:00
Peter Hoeg
8c04c3c899 notmuch-mutt: init at 0.22 2016-08-02 11:39:50 +02:00
Frederik Rietdijk
266fde80ca kde5.konversation: 1.6 -> 1.6.1 2016-08-02 09:00:03 +02:00
Frederik Rietdijk
65c109f887 kde5.konversation: use kdeWrapper 2016-08-02 08:49:12 +02:00
Ioannis Koutras
631edf7de8 syncthing-inotify: init at 0.8.3 2016-07-30 20:19:16 +03:00
Peter Hoeg
10deae8a57 syncthing: 0.14.2 -> 0.14.3 2016-07-30 11:32:43 +08:00
mimadrid
5fbe282abd
wireshark: 2.0.4 -> 2.0.5 2016-07-29 12:11:09 +02:00
mimadrid
2ea77889ad filezilla: 3.19.0 -> 3.20.0 2016-07-27 22:48:43 +02:00
Christian L
f51169366b neomutt: 20160611 -> 20160723 (#17268)
For information about what has changes, please refer to
http://www.neomutt.org/2016/07/23/release.
2016-07-27 18:55:48 +02:00
jokogr
54e870e3b1 syncthing: 0.14.0 -> 0.14.2 (#17274)
* Update syncthing from 0.14.0 to 0.14.2
* Use fetchFromGitHub instead of fetchgit
* Add joko to package maintainers
2016-07-27 18:49:43 +02:00
Miguel Madrid
94549d4fab qutebrowser: 0.8.0 -> 0.8.1 (#17302) 2016-07-27 15:50:29 +01:00
Robin Gloster
3882698004 Merge pull request #17294 from kamilchm/fix-mesos-fetcher-extract
mesos: FIX #16917 Failed to extract tgz
2016-07-27 12:23:07 +02:00
Kamil Chmielewski
81efd0c82d mesos: FIX #16917 Failed to extract tgz 2016-07-27 10:11:33 +02:00
Gabriel Ebner
7fce7c5a07 qutebrowser: 0.7.0 -> 0.8.0 2016-07-26 14:53:59 +02:00
Ram Kromberg
5685968ca6 midori: 0.5.8 -> 0.5.11 (#17142) 2016-07-25 21:25:42 +01:00
Kranium Gikos Mendoza
a5d1c8d471 bluejeans: 2.160.63.8 -> 2.160.66.8 (#17232) 2016-07-25 20:53:32 +01:00
Maximilian Güntner
1fa6fe72fd unison: 2.48.3 -> 2.48.4 (#17209)
Signed-off-by: Maximilian Güntner <code@maschinenpsychologe.de>
2016-07-25 20:50:09 +01:00
Nikolay Amiantov
cce1e9f2f4 tdesktop: use parseDrvName to get Qt release version
Closes #16559
2016-07-23 09:41:25 +03:00
Peter Hoeg
9d53dc00c3 dropbox: 4.4.29 -> 6.4.14 (#17165) 2016-07-23 00:51:55 +02:00
edanaher
5682279d14 pidgin-osd: init at 0.1.0 (#16792)
* pidgin-osd: init at 0.1.0

A straightforward pidgin plugin; kind of ancient, but still works fine.

* Use autoreconf, which minor hackery around ChangeLog.
2016-07-21 01:12:31 +02:00
Rok Garbas
f5dca01b50 firefox-bin: 48.0b7 -> 48.0b9 2016-07-21 00:59:56 +02:00
Rok Garbas
0558ae3057 firefox-bin: libpulseaudio.dev is needed otherwise firefox doesn't start 2016-07-21 00:56:38 +02:00
Graham Christensen
5bc522913b Merge pull request #17032 from Ralith/purple-hangouts
purple-hangouts-hg: init at 2016-07-17
2016-07-20 14:38:26 +00:00
Peter Hoeg
c5222b9d55 syncthing: 0.13.10 -> 0.14.0 (#17110) 2016-07-20 12:46:22 +02:00
Benjamin Saunders
54b037720d purple-hangouts-hg: init at 2016-07-17 2016-07-19 21:45:48 -07:00
Graham Christensen
098aee0cd7 Merge pull request #17035 from phanimahesh/alpine
alpine:configure: allow using passfile
2016-07-20 02:27:23 +00:00
Frederik Rietdijk
bae6ad8efa uzbl: fix build
See also #16740.
2016-07-19 15:06:42 +02:00
kc1212
05274e53f8 syncthing: 0.13.9 -> 0.13.10 (#16912) 2016-07-18 12:46:47 +02:00
J Phani Mahesh
9a4d0d8e44 alpine:configure: allow using passfile 2016-07-17 17:28:10 +05:30
Joachim F
23e27413b3 Merge pull request #17029 from nathanielbaxter/dev/teamspeak_client
teamspeak_client: 3.0.19.1 -> 3.0.19.3
2016-07-17 11:29:01 +02:00
Nathaniel Baxter
3c9788e1ce teamspeak_client: 3.0.19.1 -> 3.0.19.3 2016-07-17 17:06:44 +10:00
Joachim Fasting
ec4ae7c8b6
teamspeak_client: specify a custom, nonfree license
The licensing terms depend on use [1], but the software is clearly nonfree.
Previously, the package would happily build even with allowUnfree = false.

[1]: http://sales.teamspeakusa.com/licensing.php
2016-07-17 04:52:22 +02:00