openbox: upgrade to 3.5.0
partclone, partimage. both are used by clonezilla and drbl (which I haven't packaged yet)
almir: bump to 0.1.8
chromium: Update beta and dev channels.

This updates the following channels to the latest upstream versions:

beta: 27.0.1453.65 -> 27.0.1453.81 (builds fine, tested)
dev:  28.0.1485.0  -> 28.0.1500.5  (builds fine, tested)

For version 28, the reference to /usr/bin/gcc is now located in
third_party/WebKit/Source/core/core.gypi instead of the previous
third_party/WebKit/Source/core/core.gyp/core.gyp.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
chromium: Don't repeat full paths in installPhase.

This is no feature change and only makes the installPhase look nicer and it now
doesn't exceed 80 characters in width anymore.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
uqm: Include optional support for 3DO videos.

This is optional because you have to have an image of a Star Control II 3DO CD
image. I decided to hack together a small OperaFS (that's the proprietary
filesystem used with 3DO CD-ROMs) file extractor, which should possibly make
it as painless as possible to include those videos.

It may be a good idea to split off the haskell package into another attribute
set (possibly haskellPackages?), but I really don't think there is a need for
that, because it's really just UQM and 3DO specific.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
chromium: Add patch for user namespace sandboxing.

This patch adds support for unprivileged user namespaces found in kernel
versions 3.8.0 and later. In case of Nix, this is especially useful to prevent
having to set up setuid wrappers.

The implementation details about this patch can be found at the top of the file
"sandbox_userns.patch". My first attempt of creating this patch was by modifying
the SUID sandbox. Unfortunately this didn't work out well, because in the event
of a sandbox failure, the host zygote process waits for an answer of the inner
zygote with no timeout. Even if I'd have set a timeout, this would have been
very ugly, giving users which don't have unprivileged user namespaces a delay on
startup.

An alternative approach to the mentioned problem would be to use select() on the
host zygote, watching for changes stdout or stderr and the synchronization
socket. But even that approach isn't feasible because it requires a whole bunch
of even more patching.

Patch was tested with older kernels (3.2.x, 3.7.x) and kernels without user
namespace support enabled, where in case the feature is unavailable it reverts
back to the previous behaviour (no zygote sandbox, only seccomp BPF).

In order to support all Chromium channels, I manually changed the first hunk of
the patch to not include the starting context of the diff, because there is a
whitespace change in more recent versions of the Chromium source tree.

See SVN revision 199882 for the change (revert in this case) in detail:

http://src.chromium.org/viewvc/chrome?view=revision&revision=199882

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
Making xfe find and load icons fine

I added more dependencies to fox, for that.
I tried to add mesa too, but it wasn't trivial for it to find it, so
I took it out.
it seems kde 4.10 does not yet use udisks2

With udisks1, I do see my usb/cardreader drives.
With udisks2, I don't.

So this probably needs to be configured at build-time.
As udisks1 does work, I don't care all that much.
Merge pull request #539 from offlinehacker/pudb

Add pudb, interactive python debugger
Updating xcache
nss_ldap: fixing crash with glibc >= 2.16

I update it to the latest version, 265. Then I use some patches:

The nss_ldap-265-glibc-2.16.patch is the one that fixes the crash.
The crashes.patch is another one that I took from RH that said to fixes somes
crashes, but it didn't fix the crash I was seeing. But I guess it fixes
something.
Merge pull request #538 from MarcWeber/submit/partclone-partimage

partclone, partimage. both are used by clonezilla and drbl (which I have...
php: Update to 5.3.25, 5.4.15
thunderbird: Update to 17.0.6

Includes lots of security fixes.
Updating xfe (1.34) and fox (1.6.48)
fox: setting the newer libpng

The old version required libpng12
gnutls: update to 3.2.0

It required a nettle update to 2.7 too.
Revert "gnutls: update to 3.2.0"

Hydra found that the i686 tests fail. I'll work on this later.
  http://hydra.nixos.org/build/4980459

This reverts commit c1708440bd92ad2a3142fe709b853234c65de60f.
zsync: update to 0.6.2