Forbid root user creation as it could lead to a system without any
non-priviledged user accouts.
Fixes: <https://issues.guix.gnu.org/54666>.
* gnu/installer/newt/user.scm (run-user-add-page): Forbid it.
Includes fixes for CVE-2022-1097, CVE-2022-1196, CVE-2022-24713,
CVE-2022-28281, CVE-2022-28282, CVE-2022-28285, CVE-2022-28286, and
CVE-2022-28289.
* gnu/packages/gnuzilla.scm (%icecat-version, %icecat-build-id): Update.
(icecat-source): Update gnuzilla commit, base version, and hashes.
[[PGP Signed Part:No public key for 2208D20958C1DEB0 created at 2022-03-28T11:03:48+0200 using RSA]]
* gnu/packages/mail.scm (l2md): Update to 9db252bc.
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
Current plocate package sets the --sharedstatedir to a store directory, which
causes updatedb and plocate to fail by default since the store is immutable.
This will set the default database path to /var/cache/plocate.db instead.
* gnu/packages/search.scm (plocate): Change build options.
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
Looks like phodav requires libsoup 2. Example of failing build logs,
wanting libsoup 2.4: <https://ci.guix.gnu.org/build/584454/log/raw>
After swapping the dependency, tests were failing due to HOME not being
writable. I added a new build phase to account for this. I also removed
the start-virtual-dir-server phase which no longer seems required, the
tests pass without it.
* gnu/packages/gnome.scm (phodav): Fix build, tests.
[inputs]: Replace libsoup 3 with libsoup 2.
[arguments]<#:phases>[set-temporary-home]: New phase.
[arguments]<#:phases>[start-virtual-dir-server]: Remove phase.
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
* gnu/packages/linux.scm (config->string): add a clause handling strings
Allows for the declarative configuration of kconfig options which accept
strings, such as CONFIG_MODULE_SIG_KEY.
I've enclosed the given string in quotes, but don't do any kind of
escaping. See the kernel mailing list for the current state of escaped
strings upstream:
https://patchwork.kernel.org/project/linux-kbuild/patch/1431003982-992-1-git-send-email-sr@denx.de/
Apologies to those with double-quotes or backslashes in their
CONFIG_SYSTEM_*_KEYS.
Signed-off-by: antlers <autumnalantlers@gmail.com>
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
* gnu/packages/wm.scm (xmonad-next)[arguments]: Use #$output, #$name
and #$synopsis instead of %output, name and synopsis.
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
This is needed since the update of python-loompy.
* gnu/packages/bioinformatics.scm (pigx-scrnaseq)[arguments]: Rename
'set-PYTHONPATH to 'set-additional-environment-variables and set
NUMBA_CACHE_DIR.
This reverts commit 223a3d7f7f, as it triggered
thousands of rebuilds due to inadvertently touching git-minimal/fixed.
Reported-by: Christopher Baines <mail@cbaines.net>
* gnu/packages.scm (package-unique-version-prefix): New procedure.
* guix/scripts/package.scm (manifest-entry-version-prefix): Use it.
* tests/packages.scm ("package-unique-version-prefix, gcc@8")
("package-unique-version-prefix, grep"): New tests.
* gnu/services/admin.scm (<log-cleanup-configuration>): New record
type.
(log-cleanup-program, log-cleanup-mcron-jobs): New procedures.
(log-cleanup-service-type): New variable.
* doc/guix.texi (Log Rotation): Document it.
* gnu/packages/bioinformatics.scm (smithwaterman)[arguments]: Add
make-flag to use cxx-for-target. Adjust custom 'patch-source and
'build-dynamic phases to use cross toolchain binaries when cross
compiling. Remove trailing #t from phases.
Efraim Flashner
Mathieu Othacehe
Ricardo Wurmus
Hong Li
Mark H Weaver
Liliana Marie Prikler
Vagrant Cascadian
Andrew Tropin
Attila Lendvai
ykonai
Leo Nikkilä
jgart
Felix Gruber
Zhu Zihao
antlers
Michael Rohleder
Imran Iqbal
Daniel Meißner
Greg Hogan
Maxim Cournoyer
Leo Famulari
Ludovic Courtès
Feng Shu
kiasoc5
Mădălin Ionel Patrașcu