gnu: font-iosevka: Update to 1.12.5.

* gnu/packages/fonts.scm (font-iosevka): Update to 1.12.5.  Re-indent.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

gnu: font-go: Update to 20170330-1.f03a046.

* gnu/packages/fonts.scm (font-go): Update to 20170330-1.f03a046.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

gnu: Add mediainfo.

* gnu/packages/video.scm (mediainfo): New variable.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

gnu: Add libmediainfo

* gnu/packages/video.scm (libmediainfo): New variable.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

gnu: Add libzen.

* gnu/local.mk (GNU_SYSTEM_MODULES): Add new file.
* gnu/packages/cpp.scm (libzen): New varible.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

tests: Fix race condition in 'container-excursion*' test.

* tests/containers.scm ("container-excursion*"): Move (namespace pid)
call before (kill pid SIGKILL).

gnu: dovecot: Update to 2.2.30.1.

* gnu/packages/mail.scm (dovecot): Update to 2.2.30.1.

gnu: synfigstudio: Fix crash on opening files.

* gnu/packages/animation.scm (synfigstudio)[arguments]: Add "wrap-program"
phase.

gnu: openldap: Fix CVE-2017-9287.

* gnu/packages/patches/openldap-CVE-2017-9287.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.
* gnu/packages/openldap.scm (openldap)[replacement]: New field.
(openldap/fixed): New variable.

gnu: dovecot: Update to 2.2.30.

* gnu/packages/mail.scm (dovecot): Update to 2.2.30.

gnu: sudo: Unbundle zlib.

* gnu/packages/admin.scm (sudo)[source]: Add 'snippet'.
[inputs]: Add ZLIB.

gnu: Add xsel.

* gnu/packages/xdisorg.scm (xsel): New variable.

gnu: graphicsmagick: Remove bundled libraries from source checkout.

Fixes <https://bugs.gnu.org/27120>.

* gnu/packages/imagemagick.scm (graphicsmagick)[source]: Add a snippet
to delete bundled libraries.
[version]: Bump the package revision counter to 3.

gnu: Add 'git-remote-gcrypt' package

* gnu/packages/version-control.scm (git-remote-gcrypt): New variable.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

daemon: Report hash mismatches in a cleaner way.

Suggested by Hartmut Goebel.

* nix/libstore/build.cc (DerivationGoal::registerOutputs): Report hash
mismatches on 3 lines for clarity.
(SubstitutionGoal::finished): Likewise.

doc: Move the NGinx service configuration documentation together.

* doc/guix.texi (Web Services): Add documentation for
  nginx-upstream-configuration and nginx-location-configuration.
  (VPN Services): Remove documentation for nginx-upstream-configuration and
  nginx-location-configuration.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

activation: Change permissions on /root to #o700.

Reported by Alex Griffin <a@ajgrf.com>.
Fixes <http://bugs.gnu.org/27135>.

* gnu/build/activation.scm (add-user): When UID is zero, add 'chmod'
call.
* gnu/tests/base.scm (run-basic-test)["permissions on /root"]: New test.

git-download: Fix 'git-predicate' to use absolute paths.

git ls-files will return paths relative to the repository directory. This
commit prepends the repository directory to those paths when calling lstat,
such that 'git-predicate' works if the current working directory is not the
repository directory.

* guix/git-download.scm (git-predicate): Prepend repository directory to the
  file path when calling lstat.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

gnu: libntlm: Update to 1.4.

* gnu/packages/gsasl.scm (libntlm): Update to 1.4.

gnu: sudo: Update to 1.8.20p1 [fixes CVE-2017-1000367].

* gnu/packages/admin.scm (sudo): Update to 1.8.20p1.