gnu: emacs-org: Update to 9.1.3.

* gnu/packages/emacs.scm (emacs-org): Update to 20171116 a.k.a. Org 9.1.3.

services: dicod: Run in a container.

* gnu/services/dict.scm (dicod-shepherd-service): Add
'with-imported-modules' form and 'modules' field.  Use
'make-forkexec-constructor/container' instead of
'make-forkexec-constructor'.

shepherd: Include /etc/group in service containers.

* gnu/build/shepherd.scm (default-mounts)[passwd]: Rename to...
[accounts]: ... this.  Add /etc/group.

gnu: gnumeric: Update to 1.12.36.

* gnu/packages/gnome.scm (gnumeric): Update to 1.12.36.

gnu: goffice: Update to 0.10.36.

* gnu/packages/gnome.scm (goffice): Update to 0.10.36.

gnu: libzip: Update to 1.3.2.

* gnu/packages/compression.scm (libzip): Update to 1.3.2.

gnu: libzip: Use new libzip.org home page.

* gnu/packages/compression.scm (libzip)[home-page]: Update.

gnu: vlc: Update to 2.2.8 [fixes CVE-2017-9300, CVE-2017-10699].

* gnu/packages/video.scm (vlc): Update to 2.2.8.

gnu: emacs-magit-popup: Update for the new source.

'magit-popup' is not a part of 'magit' anymore.

* gnu/packages/emacs.scm (emacs-magit-popup): Update to 2.12.0.
[source]: Update origin URL and file-name.
[home-page]: Update to the new home.
[native-inputs]: Add 'texinfo' to build the info manual.
[arguments]: Add 'make-info' phase.

gnu: emacs-hl-todo: Update to 1.8.0.

* gnu/packages/emacs.scm (emacs-hl-todo): Update to 1.8.0.

doc: Split the "Substitutes" section into subsections.

* doc/guix.texi (Substitutes): Move information into sections, and create one
  new subsection regarding substitution failure.
  (Top): In the detailed listing, add entries for the new subsections.
  (Official Substitute Server): Move info about hydra here.  Add information
  that explains when substitutes are enabled by default.
  (Substitute Server Authorization): Move information about how to enable or
  disable substitutes here.
  (Substitute Authentication): Move information about how Guix authenticates
  substitutes here.
  (Proxy Settings): Move information about how to download substitutes via
  proxy here.
  (Substitution Failure): New section.  Add information about how Guix handles
  substitution failure.  Be extra clear about behavior concerning --fallback.
  (On Trusting Binaries): Move information about trusting binaries here.
  (Invoking guix-daemon): Remove an incorrect statement about when substitutes
  are enabled by default.
  (Common Build Options): Add cross-references for the --fallback option.

Co-authored-by: George Clemmer <myglc2@gmail.com>

gnu: procmail: Fix CVE-2017-16844.

* gnu/packages/patches/procmail-CVE-2017-16844.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.
* gnu/packages/mail.scm (procmail)[source]: Use it.

gnu: linux-libre: Update to 4.14.1.

* gnu/packages/linux.scm (%linux-libre-version): Update to 4.14.1.
(%linux-libre-hash): Update hash.

gnu: linux-libre@4.9: Update to 4.9.64.

* gnu/packages/linux.scm (linux-libre-4.9): Update to 4.9.64.

gnu: linux-libre@4.4: Update to 4.4.100.

* gnu/packages/linux.scm (linux-libre-4.4): Update to 4.4.100.

gnu: lmms: Fix build.

* gnu/packages/music.scm (lmms)[arguments]: Add phases "remove-Werror" and
"make-manpages-writable".

Revert "Add (guix self) and use it when pulling."

This reverts commit 5f93d97005897c2d859f0be1bdff34c88467ec61.

'guix pull' would fail because (guix self) needs 'scheme-files'
from (guix discovery), which was not exported until now.

gnu: idr: Update to 2.0.3.

* gnu/packages/bioinformatics.scm (idr): Update to 2.0.3.
[source]: Add snippet to remove generated code.

gnu: idr: Correct license.

* gnu/packages/bioinformatics.scm (idr)[license]: Change to GPLv2+.

hydra: Add jobs for the modular Guix.

* build-aux/hydra/guix-modular.scm: New file.
* Makefile.am (EXTRA_DIST): Add it.