gnu: linux-libre: Update to 4.8. * gnu/packages/linux.scm (linux-libre): Update to 4.8. * gnu/packages/linux-libre-4.7-x86_64.conf, gnu/packages/linux-libre-4.7-i686.conf: Delete files. * gnu/packages/linux-libre-4.8-x86_64.conf, gnu/packages/linux-libre-4.8-i686.conf: New files. * Makefile.am (KCONFIGS): Update accordingly.
gnu: nss: Increase build timeout to 60 hours. * gnu/packages/gnuzilla.scm (nss)[properties]: Increase build timeout to 60 hours.
gnu: gnunet: Add inputs. * gnu/packages/gnunet.scm (gnunet)[inputs]: Add perl, jansson, nss, gmp, bluez, glib, libogg. [native-inputs]: Move python-2 from here ... [inputs]: ... to here. Signed-off-by: Leo Famulari <leo@famulari.name>
lint: 'cve' checker reports the replacement's vulnerabilities.
Before, 'guix lint -c cve' would report the vulnerabilities of the
original package while pretending they are the vulnerabilities of the
replacement.
* guix/scripts/lint.scm (check-vulnerabilities): Consider the package
replacement before calling 'package-vulnerabilities'.
* tests/lint.scm ("cve: vulnerability fixed in replacement version"):
New test.
gnu: gctp: 'license' field now has a <license> value. * gnu/packages/maths.scm (gctp)[license]: Change to a <license> record.
gnu: libgcrypt@1.7: Replacement now has an accurate 'version' field. * gnu/packages/gnupg.scm (libgcrypt-1.7.3)[version]: New field.
gnu: openssl@1.0: Replacement now has an accurate 'version' field. * gnu/packages/tls.scm (openssl-1.0.2j)[name, version]: New fields.
grafts: Allow the replacement to have a different name.
* guix/build/graft.scm (replace-store-references): REPLACEMENT is now
the full string, not just the hash.
(rewrite-directory)[hash-mapping](valid-suffix?): Remove.
(hash+suffix): Rename to...
(hash+rest): ... this. Change to return the whole string as the second
element of the list. Adjust 'match-lambda' expression accordingly;
check whether the string length of the origin and replacement match.
* tests/grafts.scm ("graft-derivation, grafted item uses a different
name"): New test.
* doc/guix.texi (Security Updates): Update sentence on the name/version
restriction.
gnu: libarchive: Fix several security issues. * gnu/packages/backup.scm (libarchive)[replacement]: New field. (libarchive/fixed): New variable. * gnu/packages/patches/libarchive-7zip-heap-overflow.patch, gnu/packages/patches/libarchive-fix-symlink-check.patch, gnu/packages/patches/libarchive-fix-filesystem-attacks.patch, gnu/packages/patches/libarchive-safe_fprintf-buffer-overflow.patch: New files. * gnu/local.mk (dist_patch_DATA): Add them.
gnu: perl-dbd-mysql: Update to 4.037 [fixes CVE-2016-1246]. * gnu/packages/databases.scm (perl-dbd-mysql): Update to 4.037.
tests: Adjust 'guix build -S' test for source-less packages. This is a followup to 8a54c0ec694ad6e22b155d167552b8fd0914e82d. * tests/guix-build.sh: Allow 'guix build -S' to succeed with source-less packages. Check that the result is the empty string.
tests: ssh: Add Dropbear test. * gnu/tests/ssh.scm (run-ssh-test): Try authenticating with 'userauth-none!' when 'userauth-password!' fails. (%test-dropbear): New variable.
tests: ssh: Generalize. * gnu/tests/ssh.scm (%openssh-os): Rename to... (%base-os): ... this. [services]: Remove 'openssh-service-type' instance. (os-with-service): New procedure. (run-openssh-test): Rename to... (run-ssh-test): ... this. Add 'ssh-service' and 'pid-file' parameters. Use 'os-with-service' to add SSH-SERVICE to %BASE-OS. Honor PID-FILE. (%test-openssh): Adjust accordingly.
services: rottlog: Add Rottlog to the global profile. * gnu/services/admin.scm (rottlog-service-type): Extend PROFILE-SERVICE-TYPE.
services: rottlog: Improve default weekly rotations. * gnu/services/admin.scm (%rotated-files): Add "/var/log/maillog". (syslog-rotation-config): Change parameter to 'files'. Return a string-append gexp for all of FILES. (simple-rotation-config): Remove unnecessary 'postrotate' and 'endscript'. (%default-rotations): Adjust accordingly.
tests: Add 'openssh-service-type' test. * gnu/tests/ssh.scm: New file. * gnu/local.mk (GNU_SYSTEM_MODULES): Add it.
services: openssh-service-type: Expose 'openssh-configuration'. * gnu/services/ssh.scm (<openssh-configuration>): Add default values. [pubkey-authentication?]: Rename to... [public-key-authentication?]: ... this. (openssh-service): Remove. * doc/guix.texi (Networking Services): Adjust accordingly.
services: Add rottlog. * gnu/services/admin.scm: New file. * gnu/local.mk (GNU_SYSTEM_MODULES): Add it. * doc/guix.texi (Log Rotation): New node. Co-authored-by: Ludovic Courtès <ludo@gnu.org>
gnu: ghc-process: Replace reference to /bin/sh. * gnu/packages/haskell.scm (ghc-process)[arguments]: Add phases "patch-reference-to-/bin/sh" to replace reference to /bin/sh.
gnu: Do not propagate inputs in haskell.scm. * gnu/packages/haskell.scm (ghc-streaming-commons)[propagated-inputs]: Move ghc-random... [inputs]: ...to here; remove ghc-async, add ghc-directory, add ghc-transformers; move ghc-quickcheck, ghc-hspec... [native-inputs]: ...to here; add hspec-discover. (ghc-test-framework)[propagated-inputs]: Move all from here... [inputs]: ...to here; move ghc-hunit and ghc-quickcheck... [native-inputs]: ...to here. (ghc-attoparsec)[propagated-inputs]: Move ghc-scientific... [inputs]: ...to here; move ghc-quickcheck, ghc-quickcheck-unicode, ghc-test-framework, ghc-test-framework-quickcheck2, ghc-vector... [native-inputs]: ...to here. (ghc-zip-archive)[propagated-inputs]: Move all inputs from here... [inputs]: ...to here; move ghc-hunit from here... [native-inputs]: ...to here. (ghc-network-uri)[inputs]: Add ghc-parsec; move ghc-hunit from here... [native-inputs]: ...to here. [propagated-inputs]: Remove. (ghc-wai)[propagated-inputs]: Move all inputs from here... [inputs]: ...to here; move ghc-quickcheck, ghc-hunit, and ghc-hspec from here... [native-inputs]: ...to here. Add hspec-discover. (ghc-wai-extra)[propagated-inputs]: Remove ghc-hspec and ghc-hunit; move all other inputs from here... [inputs]: ...to here. [native-inputs]: Add hspec-discover, ghc-hspec, and ghc-hunit. (ghc-resourcet, ghc-xss-sanitize, ghc-parsec, ghc-vector, ghc-http, ghc-base-compat, ghc-base-orphans, ghc-word8)[inputs]: Move all inputs from here... [native-inputs]: ...to here. (ghc-haddock-library, ghc-hspec-contrib, ghc-base-compat, ghc-base-orphans, ghc-fast-logger, ghc-word8, ghc-aeson-qq, ghc-logging-facade, ghc-mockery, ghc-yaml, ghc-hslua)[native-inputs]: Add hspec-discover. (ghc-fast-logger)[inputs]: Move ghc-hspec from here... [native-inputs]: ...to here. (ghc-data-default, ghc-data-default-instances-base, ghc-data-default-instances-containers, ghc-data-default-instances-dlist, ghc-haddock-api, ghc-happy, ghc-haskell-src-exts, ghc-resourcet, ghc-xss-sanitize, ghc-sdl-mixer, ghc-sdl-image, ghc-glut, ghc-gluraw, ghc-opengl, cpphs, ghc-old-time, ghc-data-default-instances-old-locale, cabal-install, ghc-x11, ghc-x11-xft, ghc-hashable, ghc-test-framework-hunit, ghc-test-framework, ghc-tf-random, ghc-transformers-base, ghc-unix-time, ghc-http-types, ghc-iproute, ghc-regex-base, ghc-regex-posix, ghc-regex-tdfa-rc, ghc-parsers, ghc-trifecta, ghc-distributive, ghc-comonad, ghc-polyparse, ghc-profunctors, ghc-reducers, ghc-xml, ghc-exceptions, ghc-temporary, ghc-temporary-rc, ghc-smallcheck, ghc-tasty-ant-xml, ghc-quickcheck-instances, ghc-quickcheck, ghc-case-insensitive, ghc-chasingbottoms, ghc-unordererd-containers, ghc-uniplate, ghc-ansi-wl-pprint, ghc-parsec, ghc-vector, ghc-vector-binary-instances, ghc-http, ghc-hspec, ghc-hspec-contrib, ghc-hspec-core, ghc-hspec-meta, ghc-vault, ghc-monad-control, ghc-blaze-builder, ghc-blaze-markup, ghc-blaze-html, ghc-async, ghc-optparse-applicative, ghc-charset, ghc-void, ghc-kan-extensions, ghc-statevar, ghc-lens, ghc-cheapskate, ghc-semigroupoids, ghc-contrvariant, ghc-semigroups, ghc-free, ghc-adjunctions, ghc-fast-logger, ghc-doctest, ghc-lifted-base, ghc-tasty-quickcheck, ghc-tasty-golden, ghc-tasty, ghc-cookie, ghc-scientific, ghc-aeson, ghc-wai-logger, ghc-pandoc-types, ghc-texmath, ghc-regex-pcre-builtin, ghc-highlighting-kate, ghc-cmark, ghc-enclosed-exceptions, ghc-th-lift, ghc-th-expand-syns, ghc-th-reify-many, ghc-th-orphans, ghc-haskell-src-meta, ghc-aeson-qq, ghc-conduit, ghc-mockery, ghc-yaml, ghc-filemanip, ghc-juicypixels, ghc-hslua, ghc-mime-types, ghc-http-client, ghc-hourglass, ghc-pem, ghc-asn1-types, ghc-asn1-encoding, ghc-asn1-parse, ghc-tasty-kat, ghc-cryptonite, ghc-x509, ghc-x509-store, ghc-x509-validation, ghc-x509-system, ghc-tls, ghc-socks, ghc-connection, ghc-http-client-tls, ghc-pandoc)[propagated-inputs]: Move inputs from here... [inputs]: ...to here.