summary refs log tree commit diff
path: root/pkgs/os-specific/linux/apparmor
Commit message (Collapse)AuthorAge
* Merge master into staging-nextgithub-actions[bot]2021-05-08
|\
| * Merge pull request #114374 from oxalica/lib/platform-support-checkSilvan Mosberger2021-05-08
| |\ | | | | | | lib.meta: introduce `availableOn` to check package availability on given platform
| | * lib.meta: introduce `availableOn`oxalica2021-04-02
| | |
* | | nixos/apparmor: improve code readabilityJulien Moutinho2021-04-23
| | |
* | | apparmor: 3.0.0 -> 3.0.1Julien Moutinho2021-04-23
| | |
* | | apparmor: 2.13.5 -> 3.0.0Julien Moutinho2021-04-23
| | |
* | | Revert "Revert "apparmor: fix and improve the service""Julien Moutinho2021-04-23
|/ / | | | | | | This reverts commit 420f89ceb267b461eed5d025b6c3c0e57703cc5c.
* / treewide: use perl.withPackages when possiblernhmjoj2021-03-31
|/ | | | | | | | | | | | | | | | | | | | | | Since 03eaa48 added perl.withPackages, there is a canonical way to create a perl interpreter from a list of libraries, for use in script shebangs or generic build inputs. This method is declarative (what we are doing is clear), produces short shebangs[1] and needs not to wrap existing scripts. Unfortunately there are a few exceptions that I've found: 1. Scripts that are calling perl with the -T switch. This makes perl ignore PERL5LIB, which is what perl.withPackages is using to inform the interpreter of the library paths. 2. Perl packages that depends on libraries in their own path. This is not possible because perl.withPackages works at build time. The workaround is to add `-I $out/${perl.libPrefix}` to the shebang. In all other cases I propose to switch to perl.withPackages. [1]: https://lwn.net/Articles/779997/
* treewide: fix double quoted strings in meta.descriptionvolth2021-01-24
| | | | Signed-off-by: Ben Siraphob <bensiraphob@gmail.com>
* treewide: pkgs.pkgconfig -> pkgs.pkg-config, move pkgconfig to alias.nixJonathan Ringer2021-01-19
| | | | | | | | | | | | | continuation of #109595 pkgconfig was aliased in 2018, however, it remained in all-packages.nix due to its wide usage. This cleans up the remaining references to pkgs.pkgsconfig and moves the entry to aliases.nix. python3Packages.pkgconfig remained unchanged because it's the canonical name of the upstream package on pypi.
* pkgs/os-specific: stdenv.lib -> libBen Siraphob2021-01-17
|
* apparmor: 2.13.5 -> 2.13.6ajs1242020-12-17
|
* Re-Revert "Merge #101508: libraw: 0.20.0 -> 0.20.2"Vladimír Čunát2020-10-26
| | | | | | | | | This reverts commit c778945806b44d46ec16bc4302e7e7163e6bab97. I believe this is exactly what brings the staging branch into the right shape after the last merge from master (through staging-next); otherwise part of staging changes would be lost (due to being already reachable from master but reverted).
* Revert "Merge #101508: libraw: 0.20.0 -> 0.20.2"Vladimír Čunát2020-10-25
| | | | | | | I'm sorry; I didn't notice it contained staging commits. This reverts commit 17f5305b6c20df795c365368d2d868266519599e, reversing changes made to a8a018ddc0a8b5c3d4fa94c94b672c37356bc075.
* apparmor: 2.13.4 -> 2.13.5ajs1242020-10-20
|
* Revert "apparmor: fix and improve the service"Vladimír Čunát2020-10-07
| | | | | | | | | | | | This reverts commit fb6d63f3fdd95a5468d43a0693c8ca7c1894363f. I really hope this finally fixes #99236: evaluation on Hydra. This time I really did check basically the same commit on Hydra: https://hydra.nixos.org/eval/1618011 Right now I don't have energy to find what exactly is wrong in the commit, and it doesn't seem important in comparison to nixos-unstable channel being stuck on a commit over one week old.
* apparmor: fix and improve the serviceJulien Moutinho2020-09-06
|
* apparmor: fix apparmor_parser path for utils packageSascha Grunert2020-08-23
| | | | Signed-off-by: Sascha Grunert <sgrunert@suse.com>
* Revert "apparmor: only apply the gnumake fix to the parser"Vladimír Čunát2020-07-18
| | | | This reverts commit 4b028aecae881fbfbe51, as planned.
* apparmor: only apply the gnumake fix to the parserVladimír Čunát2020-07-18
| | | | | This is to avoid the huge rebuild for now, as it seems to be enough to fix the problem, but I'll revert this on staging anyway.
* libapparmor: Fix build with gnumake 4.3Sarah Brofeldt2020-07-16
|
* treewide: fix broken AlpineLinux repo links (#87892)Lila2020-05-15
|
* Merge branch 'master' into staging-nextJan Tojnar2020-03-31
|\
| * treewide: add quotes to recently-changed urlsPatrick Hilhorst2020-03-28
| | | | | | Co-Authored-By: Drew <drewrisinger@users.noreply.github.com>
| * treewide: fix redirected urls (again)Patrick Hilhorst2020-03-20
| | | | | | | | | | | | Ran the same script as #78265. Additionally, manually replaced `http://goodies.xfce.org` with https.
* | apparmor: 2.13.3 -> 2.13.4ajs1242020-03-12
|/ | | | drop patches that were merged upstream
* libapparmor: support python 3.8Frederik Rietdijk2020-01-06
|
* treewide: fix *FlagsRobin Gloster2019-12-30
|
* apparmor: 2.13.1 -> 2.13.3ajs1242019-09-30
|
* apparmor: make apparmor cross-compileDing Xiang Fei2019-06-29
|
* apparmor: use stdenv.lib.getDev for headersMatthew Bauer2019-02-24
|
* lib.makePerlPath -> perlPackages.makePerlPathvolth2018-12-15
|
* libapparmor: drop conflicting patch, fix build w/muslWill Dietz2018-11-29
|
* apparmor: 2.12.0 -> 2.13.1Joachim Fasting2018-10-22
|
* apparmor: Replace meta.available checksTuomas Tynkkynen2018-09-28
| | | | | This sort of code breaks config.{allowBroken, allowUnsupportedSystem} = true by making them do unpredictable things.
* treewide: Remove stdenv.isCrossJohn Ericson2018-08-02
| | | | | | | I *want* cross-specific overrides to be verbose, so I rather not have this shorthand. This makes the syntactic overhead more proportional to the maintainence cost. Hopefully this pushes people towards fewer conditionals and more abstractions.
* tree-wide: disable `doCheck` and `doInstallCheck` where it fails (the ↵Jan Malakhovski2018-04-25
| | | | trivial part)
* libapparmor: Fix cross-compilation.Shea Levy2018-02-25
|
* libapparmor: Add musl patches from AlpineWill Dietz2018-02-13
| | | | (update: drop patches no longer needed on updated version)
* apparmor: updating utilities to fresh python (#34049)corpix2018-01-20
| | | | | | | | * apparmor: updating utilities to fresh python * apparmor: better way to depend on python * apparmor: override python derivation on the top-level
* apparmor: 2.10 -> 2.12.0adisbladis2017-12-31
|
* Python: more evaluation fixups.Vladimír Čunát2016-10-14
|
* libapparmor: Move python stuff to a separate outputEelco Dolstra2016-09-01
| | | | | | This prevents systemd and by extension a zillion other packages from having Python 2.7 in their closure. For example, the closure of systemd dropped from 133 MiB to 85 MiB.
* apparmor: cleanupsJoachim Fasting2016-04-18
| | | | | | - Move build tools to nativeBuildInputs - capability.h should come from linuxHeaders not glibc - Delete v2.9
* apparmor: fixup to use some multiple-output pathsVladimír Čunát2015-10-03
|
* Merge commit staging+systemd into closure-sizeVladimír Čunát2015-10-03
|\ | | | | | | Many non-conflict problems weren't (fully) resolved in this commit yet.
| * apparmor-utils: wrap python and perl scriptsJoachim Fasting2015-08-26
| | | | | | | | | | | | | | | | | | This allows all utilties to at least run, though most still fail because they expect to be able to read a non-existent config file. Also, aa-notify refuses to run due to a self-check on the filename, which cannot be preceded by a '.'. This has to be patched or we need to set PERL5LIB some other way.
| * apparmor: use standard phase hooksJoachim Fasting2015-08-26
| |
| * apparmor: 2.9.1 -> 2.10Joachim Fasting2015-08-26
| | | | | | | | | | | | | | An incremental release, including several fixes to the parser, library, and userspace management tools. See [1] for a comprehensive changelog. [1]: http://wiki.apparmor.net/index.php/ReleaseNotes_2_10
| * nixpkgs: apparmor - remove dbus dependencyAustin Seipp2015-08-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This was untested and didn't function without a dbus patch which wasn't applied to the system dbus package, so it wasn't used at all. Also, it creates a weird cyclic dependency if we want systemd to depend on libapparmor (for AppArmorProfiles= support), because libapparmor then wants dbus, and dbus wants systemd. Oof. Luckily, this feature and whatnot will probably all be irrelevant in the glorious kdbus-based future, and the dbus patches aren't even upstream I think. So we can just drop it. Signed-off-by: Austin Seipp <aseipp@pobox.com>