* gnu/packages/samba.scm: Rename variable 'samba/fixed' to 'samba/pinned' and
'samba/fixed-patched' to 'samba/fixed'.
* gnu/packages/gnome.scm (libsoup-minimal)[inputs]: Replace 'samba/fixed' with
'samba/pinned'.
Signed-off-by: Liliana Marie Prikler <liliana.prikler@gmail.com>
* gnu/packages/samba.scm (cifs-utils): Update to 7.0.
[arguments]: Use new style. Drop unneeded phase 'install-man-pages.
[inputs]: Drop labels.
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
* gnu/packages/samba.scm (samba/fixed): Add a FIXME comment.
[native-inputs]: Copy the complete native inputs from samba, to protect against
unintended changes in the inherited package.
As a reproducibility check, you can check the hash:
$ guix hash -r $(./pre-inst-env guix build samba --no-grafts --system=x86_64-linux)
1mg3nh705pbiz3ihq8jzkmjb15m6y8zjnzyr4hxmbciv7frgykk0
I've checked that it's correctly signed, and I've tried to verify that the PGP
key is correct -- searching for 'Samba Distribution Verification Key', the
websites of the first search results have the same key:
* https://www.linuxcompatible.org/story/samba-4150rc5-released/
* https://wiki.samba.org/index.php/Samba_4.12_Features_added/changed
* https://www.mail-archive.com/samba-announce@lists.samba.org/msg00562.html
* https://wiki.linuxfromscratch.org/blfs/ticket/14748https://groups.google.com/g/linux.samba/c/k3xaN0TIcQU has a different key,
but as mentioned on the previous locations, the key has changed.
I have also checked the source code diff (using diffoscope) between the the
current version and the previous, nothing appears 'suspicious' (with the
caveat that it is written in C).
According to "guix refresh -l" there aren't too many dependents. I'm
currently rebuilding them, no failures so far except for lxde, but it already
failed to build before this patch.
* gnu/packages/samba.scm (samba): Update to 4.16.4. To help future updaters,
add the current PGP fingerprint in a comment.
Signed-off-by: Marius Bakke <marius@gnu.org>
* gnu/packages/samba.scm: Import (guix licenses) with the "license:" prefix to
solve the conflict between the 'openssl' variables from (guix licenses) and
from (gnu packages tls). Adjust all license fields.
(ppp)[inputs]: Simplify list of inputs.
* gnu/packages/samba.scm (ppp)[arguments]: Use G-Expressions. Remove
unused substitution. Fix OpenSSL and libpcap include paths.
Signed-off-by: Guillaume Le Vaillant <glv@posteo.net>
* gnu/packages/samba.scm (samba): Update to 4.15.3.
[source]: Delete snippet; pyiso8601 is no longer bundled.
[arguments]: Adjust make-flags and arguments to use G-Exp.
[phases]{configure}: Add the '--with-system-mitkrb5', '--with-system-mitkdc'
and '--with-experimental-mit-ad-dc' configure flags.
[inputs]: Replace heimdal with mit-krb5.
[native-inputs]: Use new style.
{python-cryptography, python-dnspython, python-markdown}
{python-pyasn1}: New inputs.
(samba/fixed): Update to 4.15.3 and hide package.
This avoids big rebuilds when Samba is upgraded.
* gnu/packages/samba.scm (samba/fixed): New variable.
* gnu/packages/gnome.scm (libsoup-minimal)[inputs]: Use it instead of
SAMBA.
* gnu/packages/samba.scm (cifs-utils)[arguments]: Add "--enable-man"
to #:configure-flags. Remove useless 'create-man8dir phase. Add a new
'install-man-pages phase to do just that.
[native-inputs]: Add python-docutils.
* gnu/packages/samba.scm (samba)[arguments]: Update comment regarding the test
suite failure.
[make-flags]: Run the test suite with the '--quick' option, as it is very slow otherwise.
[phases]{configure}: Add the '--enable-selftest' argument.
[inputs]: Add libtirpc.
It previously defaulted to a $PREFIX/var, where $PREFIX was the root of the
installation directory (under /gnu/store) of Samba.
* gnu/packages/samba.scm (samba)[phases]{configure}: Add --localstatedir=/var
option.
{disable-etc-samba-directory-creation}: Rename to
disable-etc,var-samba-directories-setup and prevent creating directories under
both sysconfdir and localstatedir.
* gnu/packages/samba.scm (samba): Update to 4.13.1.
[native-inputs]: Add libxml2.
[phases]{locate-docbook-stylesheets}: Rename to...
{setup-docbook-stylesheets}: ...this. Setup offline Samba DTD catalog, and
have it used along any pre-existing XML_CATALOG_FILES environment variable in
the build script.
The configure script generates a C program to detect support for
lifetime hints on files. But this program could crash, potentially
leaving a stale unreadable file behind which could cause the
patch-generated-file-shebang phase to fail.
Reported upstream <https://bugzilla.samba.org/show_bug.cgi?id=14503>.
* gnu/packages/patches/patches/samba-fix-fcntl-hint-detection.patch: New
file.
* gnu/packages/samba.scm (samba)[origin]: Add patch.
* gnu/local.mk (dist_patch_DATA): Register patch.
Fixes CVE-2020-1472 with 4.12.7.
Fixes CVE-2020-10730, CVE-2020-10745, CVE-2020-10760 and CVE-2020-14303
with 4.12.4.
* gnu/packages/samba.org (samba): Update to 4.12.7.
