gnu: libgcrypt@1.7: Replacement now has an accurate 'version' field.

* gnu/packages/gnupg.scm (libgcrypt-1.7.3)[version]: New field.

gnu: openssl@1.0: Replacement now has an accurate 'version' field.

* gnu/packages/tls.scm (openssl-1.0.2j)[name, version]: New fields.

grafts: Allow the replacement to have a different name.

* guix/build/graft.scm (replace-store-references): REPLACEMENT is now
the full string, not just the hash.
(rewrite-directory)[hash-mapping](valid-suffix?): Remove.
(hash+suffix): Rename to...
(hash+rest): ... this.  Change to return the whole string as the second
element of the list.  Adjust 'match-lambda' expression accordingly;
check whether the string length of the origin and replacement match.
* tests/grafts.scm ("graft-derivation, grafted item uses a different
name"): New test.
* doc/guix.texi (Security Updates): Update sentence on the name/version
restriction.

gnu: libarchive: Fix several security issues.

* gnu/packages/backup.scm (libarchive)[replacement]: New field.
(libarchive/fixed): New variable.
* gnu/packages/patches/libarchive-7zip-heap-overflow.patch,
gnu/packages/patches/libarchive-fix-symlink-check.patch,
gnu/packages/patches/libarchive-fix-filesystem-attacks.patch,
gnu/packages/patches/libarchive-safe_fprintf-buffer-overflow.patch: New files.
* gnu/local.mk (dist_patch_DATA): Add them.

gnu: perl-dbd-mysql: Update to 4.037 [fixes CVE-2016-1246].

* gnu/packages/databases.scm (perl-dbd-mysql): Update to 4.037.

tests: Adjust 'guix build -S' test for source-less packages.

This is a followup to 8a54c0ec694ad6e22b155d167552b8fd0914e82d.

* tests/guix-build.sh: Allow 'guix build -S' to succeed with source-less
packages.  Check that the result is the empty string.

tests: ssh: Add Dropbear test.

* gnu/tests/ssh.scm (run-ssh-test): Try authenticating with
'userauth-none!' when 'userauth-password!' fails.
(%test-dropbear): New variable.

tests: ssh: Generalize.

* gnu/tests/ssh.scm (%openssh-os): Rename to...
(%base-os): ... this.
[services]: Remove 'openssh-service-type' instance.
(os-with-service): New procedure.
(run-openssh-test): Rename to...
(run-ssh-test): ... this.  Add 'ssh-service' and 'pid-file' parameters.
Use 'os-with-service' to add SSH-SERVICE to %BASE-OS.  Honor PID-FILE.
(%test-openssh): Adjust accordingly.

services: rottlog: Add Rottlog to the global profile.

* gnu/services/admin.scm (rottlog-service-type): Extend
PROFILE-SERVICE-TYPE.

services: rottlog: Improve default weekly rotations.

* gnu/services/admin.scm (%rotated-files): Add "/var/log/maillog".
(syslog-rotation-config): Change parameter to 'files'.  Return a
string-append gexp for all of FILES.
(simple-rotation-config): Remove unnecessary 'postrotate' and
'endscript'.
(%default-rotations): Adjust accordingly.

tests: Add 'openssh-service-type' test.

* gnu/tests/ssh.scm: New file.
* gnu/local.mk (GNU_SYSTEM_MODULES): Add it.

services: openssh-service-type: Expose 'openssh-configuration'.

* gnu/services/ssh.scm (<openssh-configuration>): Add default values.
[pubkey-authentication?]: Rename to...
[public-key-authentication?]: ... this.
(openssh-service): Remove.
* doc/guix.texi (Networking Services): Adjust accordingly.

services: Add rottlog.

* gnu/services/admin.scm: New file.
* gnu/local.mk (GNU_SYSTEM_MODULES): Add it.
* doc/guix.texi (Log Rotation): New node.

Co-authored-by: Ludovic Courtès <ludo@gnu.org>

gnu: ghc-process: Replace reference to /bin/sh.

* gnu/packages/haskell.scm (ghc-process)[arguments]: Add phases
"patch-reference-to-/bin/sh" to replace reference to /bin/sh.

gnu: Do not propagate inputs in haskell.scm.

* gnu/packages/haskell.scm
(ghc-streaming-commons)[propagated-inputs]: Move ghc-random...
[inputs]: ...to here; remove ghc-async, add ghc-directory, add
ghc-transformers; move ghc-quickcheck, ghc-hspec...
[native-inputs]: ...to here; add hspec-discover.

(ghc-test-framework)[propagated-inputs]: Move all from here...
[inputs]: ...to here; move ghc-hunit and ghc-quickcheck...
[native-inputs]: ...to here.

(ghc-attoparsec)[propagated-inputs]: Move ghc-scientific...
[inputs]: ...to here; move ghc-quickcheck, ghc-quickcheck-unicode,
ghc-test-framework, ghc-test-framework-quickcheck2, ghc-vector...
[native-inputs]: ...to here.

(ghc-zip-archive)[propagated-inputs]: Move all inputs from here...
[inputs]: ...to here; move ghc-hunit from here...
[native-inputs]: ...to here.

(ghc-network-uri)[inputs]: Add ghc-parsec; move ghc-hunit from here...
[native-inputs]: ...to here.
[propagated-inputs]: Remove.

(ghc-wai)[propagated-inputs]: Move all inputs from here...
[inputs]: ...to here; move ghc-quickcheck, ghc-hunit, and ghc-hspec from
here...
[native-inputs]: ...to here.  Add hspec-discover.

(ghc-wai-extra)[propagated-inputs]: Remove ghc-hspec and ghc-hunit; move
all other inputs from here...
[inputs]: ...to here.
[native-inputs]: Add hspec-discover, ghc-hspec, and ghc-hunit.

(ghc-resourcet, ghc-xss-sanitize, ghc-parsec, ghc-vector, ghc-http,
ghc-base-compat, ghc-base-orphans, ghc-word8)[inputs]: Move all inputs
from here...
[native-inputs]: ...to here.

(ghc-haddock-library, ghc-hspec-contrib, ghc-base-compat,
ghc-base-orphans, ghc-fast-logger, ghc-word8, ghc-aeson-qq,
ghc-logging-facade, ghc-mockery, ghc-yaml, ghc-hslua)[native-inputs]:
Add hspec-discover.

(ghc-fast-logger)[inputs]: Move ghc-hspec from here...
[native-inputs]: ...to here.

(ghc-data-default,
ghc-data-default-instances-base,
ghc-data-default-instances-containers,
ghc-data-default-instances-dlist,
ghc-haddock-api,
ghc-happy,
ghc-haskell-src-exts,
ghc-resourcet,
ghc-xss-sanitize,
ghc-sdl-mixer,
ghc-sdl-image,
ghc-glut,
ghc-gluraw,
ghc-opengl,
cpphs,
ghc-old-time,
ghc-data-default-instances-old-locale,
cabal-install,
ghc-x11,
ghc-x11-xft,
ghc-hashable,
ghc-test-framework-hunit,
ghc-test-framework,
ghc-tf-random,
ghc-transformers-base,
ghc-unix-time,
ghc-http-types,
ghc-iproute,
ghc-regex-base,
ghc-regex-posix,
ghc-regex-tdfa-rc,
ghc-parsers,
ghc-trifecta,
ghc-distributive,
ghc-comonad,
ghc-polyparse,
ghc-profunctors,
ghc-reducers,
ghc-xml,
ghc-exceptions,
ghc-temporary,
ghc-temporary-rc,
ghc-smallcheck,
ghc-tasty-ant-xml,
ghc-quickcheck-instances,
ghc-quickcheck,
ghc-case-insensitive,
ghc-chasingbottoms,
ghc-unordererd-containers,
ghc-uniplate,
ghc-ansi-wl-pprint,
ghc-parsec,
ghc-vector,
ghc-vector-binary-instances,
ghc-http,
ghc-hspec,
ghc-hspec-contrib,
ghc-hspec-core,
ghc-hspec-meta,
ghc-vault,
ghc-monad-control,
ghc-blaze-builder,
ghc-blaze-markup,
ghc-blaze-html,
ghc-async,
ghc-optparse-applicative,
ghc-charset,
ghc-void,
ghc-kan-extensions,
ghc-statevar,
ghc-lens,
ghc-cheapskate,
ghc-semigroupoids,
ghc-contrvariant,
ghc-semigroups,
ghc-free,
ghc-adjunctions,
ghc-fast-logger,
ghc-doctest,
ghc-lifted-base,
ghc-tasty-quickcheck,
ghc-tasty-golden,
ghc-tasty,
ghc-cookie,
ghc-scientific,
ghc-aeson,
ghc-wai-logger,
ghc-pandoc-types,
ghc-texmath,
ghc-regex-pcre-builtin,
ghc-highlighting-kate,
ghc-cmark,
ghc-enclosed-exceptions,
ghc-th-lift,
ghc-th-expand-syns,
ghc-th-reify-many,
ghc-th-orphans,
ghc-haskell-src-meta,
ghc-aeson-qq,
ghc-conduit,
ghc-mockery,
ghc-yaml,
ghc-filemanip,
ghc-juicypixels,
ghc-hslua,
ghc-mime-types,
ghc-http-client,
ghc-hourglass,
ghc-pem,
ghc-asn1-types,
ghc-asn1-encoding,
ghc-asn1-parse,
ghc-tasty-kat,
ghc-cryptonite,
ghc-x509,
ghc-x509-store,
ghc-x509-validation,
ghc-x509-system,
ghc-tls,
ghc-socks,
ghc-connection,
ghc-http-client-tls,
ghc-pandoc)[propagated-inputs]: Move inputs from here...
[inputs]: ...to here.

gnu: r-plotly: Update to 4.5.2.

* gnu/packages/statistics.scm (r-plotly): Update to 4.5.2.
[propagated-inputs]: Remove r-plyr; remove r-viridis; add r-dplyr; add
r-lazyeval; add r-purrr; add r-tibble; add r-viridislite.

gnu: Add r-purrr.

* gnu/packages/statistics.scm (r-purrr): New variable.

gnu: Add r-viridislite.

* gnu/packages/statistics.scm (r-viridislite): New variable.

gnu: libotf: Fix source URI.

* gnu/packages/fontutils.scm (libotf)[source]: Fix suorce URI.

gnu: vsearch: Update to 2.1.2.

* gnu/packages/bioinformatics.scm (vsearch): Update to 2.1.2.