···6061 # Hide kernel pointers (e.g. in /proc/modules) for unprivileged
62 # users as these make it easier to exploit kernel vulnerabilities.
63- #
64- # Removed under grsecurity.
65- boot.kernel.sysctl."kernel.kptr_restrict" =
66- if (config.boot.kernelPackages.kernel.features.grsecurity or false) then null else 1;
6768 # Disable YAMA by default to allow easy debugging.
69 boot.kernel.sysctl."kernel.yama.ptrace_scope" = mkDefault 0;
···6061 # Hide kernel pointers (e.g. in /proc/modules) for unprivileged
62 # users as these make it easier to exploit kernel vulnerabilities.
63+ boot.kernel.sysctl."kernel.kptr_restrict" = 1;
0006465 # Disable YAMA by default to allow easy debugging.
66 boot.kernel.sysctl."kernel.yama.ptrace_scope" = mkDefault 0;
···30 cd $out/zones
3132 for zoneFile in *; do
033 ${nsdPkg}/sbin/nsd-checkzone "$zoneFile" "$zoneFile" || {
34 if grep -q \\\\\\$ "$zoneFile"; then
35 echo zone "$zoneFile" contains escaped dollar signes \\\$
···30 cd $out/zones
3132 for zoneFile in *; do
33+ echo "|- checking zone '$out/zones/$zoneFile'"
34 ${nsdPkg}/sbin/nsd-checkzone "$zoneFile" "$zoneFile" || {
35 if grep -q \\\\\\$ "$zoneFile"; then
36 echo zone "$zoneFile" contains escaped dollar signes \\\$
···113 "--enable-system-sqlite"
114 #"--enable-system-cairo"
115 "--enable-startup-notification"
116- "--enable-content-sandbox" # available since 26.0, but not much info available
117 "--disable-tests"
118 "--disable-necko-wifi" # maybe we want to enable this at some point
119 "--disable-updater"
···113 "--enable-system-sqlite"
114 #"--enable-system-cairo"
115 "--enable-startup-notification"
116+ #"--enable-content-sandbox" # TODO: probably enable after 54
117 "--disable-tests"
118 "--disable-necko-wifi" # maybe we want to enable this at some point
119 "--disable-updater"
···59 maintainers = with maintainers; [ wkennington ];
60 # kernel 4.2 is the most recent supported kernel
61 broken = kernel != null &&
62- (builtins.compareVersions kernel.version "4.2" == 1 ||
63- (kernel.features.grsecurity or false));
64 };
65}
···59 maintainers = with maintainers; [ wkennington ];
60 # kernel 4.2 is the most recent supported kernel
61 broken = kernel != null &&
62+ (builtins.compareVersions kernel.version "4.2" == 1);
063 };
64}
+2-1
pkgs/development/libraries/log4shib/default.nix
···1213 nativeBuildInputs = [ autoreconfHook ];
1415- meta = {
16 description = "A forked version of log4cpp that has been created for the Shibboleth project";
017 };
18}
···1213 nativeBuildInputs = [ autoreconfHook ];
1415+ meta = with stdenv.lib; {
16 description = "A forked version of log4cpp that has been created for the Shibboleth project";
17+ maintainers = [ maintainers.jammerful ];
18 };
19}
···22 description = "A low-level library written in C++ that provides support for producing and consuming SAML messages";
23 platforms = platforms.unix;
24 license = licenses.asl20;
025 };
26}
···22 description = "A low-level library written in C++ that provides support for producing and consuming SAML messages";
23 platforms = platforms.unix;
24 license = licenses.asl20;
25+ maintainers = [ maintainers.jammerful ];
26 };
27}
···27 description = "Enables SSO and Federation web applications written with any programming language or framework";
28 platforms = platforms.unix;
29 license = licenses.asl20;
030 };
31}
···27 description = "Enables SSO and Federation web applications written with any programming language or framework";
28 platforms = platforms.unix;
29 license = licenses.asl20;
30+ maintainers = [ maintainers.jammerful ];
31 };
32}
···19 description = "A low-level library that provides a high level interface to XML processing for OpenSAML 2";
20 platforms = platforms.unix;
21 license = licenses.asl20;
022 };
23}
···19 description = "A low-level library that provides a high level interface to XML processing for OpenSAML 2";
20 platforms = platforms.unix;
21 license = licenses.asl20;
22+ maintainers = [ maintainers.jammerful ];
23 };
24}
+32
pkgs/development/python-modules/3to2/default.nix
···00000000000000000000000000000000
···1+{ lib
2+, buildPythonPackage
3+, fetchurl
4+, pytest
5+}:
6+7+buildPythonPackage rec {
8+ pname = "3to2";
9+ version = "1.1.1";
10+ name = "${pname}-${version}";
11+12+ src = fetchurl {
13+ url = "https://files.pythonhosted.org/packages/8f/ab/58a363eca982c40e9ee5a7ca439e8ffc5243dde2ae660ba1ffdd4868026b/${pname}-${version}.zip";
14+ sha256 = "fef50b2b881ef743f269946e1090b77567b71bb9a9ce64b7f8e699b562ff685c";
15+ };
16+17+ checkInputs = [ pytest ];
18+19+ checkPhase = ''
20+ py.test lib3to2/tests
21+ '';
22+23+ # Test failing due to upstream issue (https://bitbucket.org/amentajo/lib3to2/issues/50/testsuite-fails-with-new-python-35)
24+ doCheck = false;
25+26+ meta = {
27+ homepage = https://bitbucket.org/amentajo/lib3to2;
28+ description = "Refactors valid 3.x syntax into valid 2.x syntax, if a syntactical conversion is possible";
29+ license = lib.licenses.asl20;
30+ maintainers = with lib.maintainers; [ mt-caret ];
31+ };
32+}
+38
pkgs/development/python-modules/cram/default.nix
···00000000000000000000000000000000000000
···1+{lib, buildPythonPackage, fetchPypi, coverage, bash, which, writeText}:
2+3+buildPythonPackage rec {
4+ name = "${pname}-${version}";
5+ version = "0.7";
6+ pname = "cram";
7+8+ buildInputs = [ coverage which ];
9+10+ src = fetchPypi {
11+ inherit pname version;
12+ sha256 = "0bvz6fwdi55rkrz3f50zsy35gvvwhlppki2yml5bj5ffy9d499vx";
13+ };
14+15+ postPatch = ''
16+ substituteInPlace tests/test.t \
17+ --replace "/bin/bash" "${bash}/bin/bash"
18+ '';
19+20+ # This testing is copied from Makefile. Simply using `make test` doesn't work
21+ # because it uses the unpatched `scripts/cram` executable which has a bad
22+ # shebang. Also, for some reason, coverage fails on one file so let's just
23+ # ignore that one.
24+ checkPhase = ''
25+ # scripts/cram tests
26+ #COVERAGE=${coverage}/bin/coverage $out/bin/cram tests
27+ #${coverage}/bin/coverage report --fail-under=100
28+ COVERAGE=coverage $out/bin/cram tests
29+ coverage report --fail-under=100 --omit="*/_encoding.py"
30+ '';
31+32+ meta = {
33+ description = "A simple testing framework for command line applications";
34+ homepage = https://bitheap.org/cram/;
35+ license = lib.licenses.gpl2Plus;
36+ maintainers = with lib.maintainers; [ jluttine ];
37+ };
38+}