···64with fileinput.FileInput(default_nix, inplace=True) as f:
65 for line in f:
66 result = re.sub(r'^ release_version = ".+";', f' release_version = "{release_version}";', line)
67- result = re.sub(r'^ version = ".+";', f' version = "{version}";', line)
68 result = re.sub(r'^ rev = ".*";', f' rev = "{commit["sha"]}";', result)
69 result = re.sub(r'^ sha256 = ".+";', f' sha256 = "{hash}";', result)
70 print(result, end='')
···64with fileinput.FileInput(default_nix, inplace=True) as f:
65 for line in f:
66 result = re.sub(r'^ release_version = ".+";', f' release_version = "{release_version}";', line)
67+ result = re.sub(r'^ version = ".+";', f' version = "{version}";', result)
68 result = re.sub(r'^ rev = ".*";', f' rev = "{commit["sha"]}";', result)
69 result = re.sub(r'^ sha256 = ".+";', f' sha256 = "{hash}";', result)
70 print(result, end='')
+2-2
pkgs/development/libraries/dbus/default.nix
···67 libICE
68 libSM
69 ] ++ lib.optional enableSystemd systemd
70- ++ lib.optionals (!stdenv.isDarwin) [ audit libapparmor ];
71 # ToDo: optional selinux?
7273 configureFlags = [
···84 "--with-systemdsystemunitdir=${placeholder "out"}/etc/systemd/system"
85 "--with-systemduserunitdir=${placeholder "out"}/etc/systemd/user"
86 ] ++ lib.optional (!x11Support) "--without-x"
87- ++ lib.optionals (!stdenv.isDarwin) [ "--enable-apparmor" "--enable-libaudit" ];
8889 # Enable X11 autolaunch support in libdbus. This doesn't actually depend on X11
90 # (it just execs dbus-launch in dbus.tools), contrary to what the configure script demands.
···67 libICE
68 libSM
69 ] ++ lib.optional enableSystemd systemd
70+ ++ lib.optionals stdenv.isLinux [ audit libapparmor ];
71 # ToDo: optional selinux?
7273 configureFlags = [
···84 "--with-systemdsystemunitdir=${placeholder "out"}/etc/systemd/system"
85 "--with-systemduserunitdir=${placeholder "out"}/etc/systemd/user"
86 ] ++ lib.optional (!x11Support) "--without-x"
87+ ++ lib.optionals stdenv.isLinux [ "--enable-apparmor" "--enable-libaudit" ];
8889 # Enable X11 autolaunch support in libdbus. This doesn't actually depend on X11
90 # (it just execs dbus-launch in dbus.tools), contrary to what the configure script demands.
···1-{ stdenv, lib, buildPackages, fetchurl, fetchFromGitLab, fetchpatch
2, enableStatic ? stdenv.hostPlatform.isStatic
3, enableMinimal ? false
4# Allow forcing musl without switching stdenv itself, e.g. for our bootstrapping:
···32 CONFIG_FEATURE_WTMP n
33 '';
3435- # The debian version lacks behind the upstream version and also contains
36 # a debian-specific suffix. We only fetch the debian repository to get the
37 # default.script
38 debianVersion = "1.30.1-6";
···4950stdenv.mkDerivation rec {
51 pname = "busybox";
52- # TODO: When bumping to next version, remove the patch
53- # for CVE-2021-28831 (assuming the patch was included in
54- # the next upstream release)
55- version = "1.32.1";
5657 # Note to whoever is updating busybox: please verify that:
58 # nix-build pkgs/stdenv/linux/make-bootstrap-tools.nix -A test
59 # still builds after the update.
60 src = fetchurl {
61 url = "https://busybox.net/downloads/${pname}-${version}.tar.bz2";
62- sha256 = "1vhd59qmrdyrr1q7rvxmyl96z192mxl089hi87yl0hcp6fyw8mwx";
63 };
6465 hardeningDisable = [ "format" "pie" ]
···6768 patches = [
69 ./busybox-in-store.patch
70- (fetchpatch {
71- name = "CVE-2021-28831.patch";
72- url = "https://git.busybox.net/busybox/patch/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd";
73- sha256 = "0y79flfbk45krwn963nnbqc21a88bsz4k4asqwvcnfk2lkciadxm";
74- }) # TODO: Removing when bumping the version
75 ] ++ lib.optional (stdenv.hostPlatform != stdenv.buildPlatform) ./clang-cross.patch;
7677 postPatch = "patchShebangs .";
···142 meta = with lib; {
143 description = "Tiny versions of common UNIX utilities in a single small executable";
144 homepage = "https://busybox.net/";
145- license = licenses.gpl2;
146 maintainers = with maintainers; [ TethysSvensson ];
147 platforms = platforms.linux;
148 priority = 10;
···1+{ stdenv, lib, buildPackages, fetchurl, fetchFromGitLab
2, enableStatic ? stdenv.hostPlatform.isStatic
3, enableMinimal ? false
4# Allow forcing musl without switching stdenv itself, e.g. for our bootstrapping:
···32 CONFIG_FEATURE_WTMP n
33 '';
3435+ # The debian version lags behind the upstream version and also contains
36 # a debian-specific suffix. We only fetch the debian repository to get the
37 # default.script
38 debianVersion = "1.30.1-6";
···4950stdenv.mkDerivation rec {
51 pname = "busybox";
52+ version = "1.33.1";
0005354 # Note to whoever is updating busybox: please verify that:
55 # nix-build pkgs/stdenv/linux/make-bootstrap-tools.nix -A test
56 # still builds after the update.
57 src = fetchurl {
58 url = "https://busybox.net/downloads/${pname}-${version}.tar.bz2";
59+ sha256 = "0a0dcvsh7nxnhxc5y73fky0z30i9p7r30qfidm2akn0n5fywdkhj";
60 };
6162 hardeningDisable = [ "format" "pie" ]
···6465 patches = [
66 ./busybox-in-store.patch
0000067 ] ++ lib.optional (stdenv.hostPlatform != stdenv.buildPlatform) ./clang-cross.patch;
6869 postPatch = "patchShebangs .";
···134 meta = with lib; {
135 description = "Tiny versions of common UNIX utilities in a single small executable";
136 homepage = "https://busybox.net/";
137+ license = licenses.gpl2Only;
138 maintainers = with maintainers; [ TethysSvensson ];
139 platforms = platforms.linux;
140 priority = 10;