network-interfaces: Add an option for specifying search to resolv.conf
nixos: Add zram swap module

This allows you to use the Linux kernel's built-in compressed memory as
swap space functionality.

It is recommended to enable only for kernel 3.14 (which is when zram came out of
the staging drivers area) or higher.
Scatter output hook

This hook allows to scatter files in $out to multiple outputs.
For "bin" and "doc" outputs there are prefefined default masks, but
they can be overriden by setting files_<outname>, for example:

files_bin = [ "/bin/*" "/lib/libexec/" ];

To make an effect hook must be specified in buildInputs.
make use of new extractRuntimeHook
grsecurity: Add paxctl, paxmark and stdenv.needsPax to stdenv
spl: Fix compilation with grsecurity's constify plugin and kernels < 3.8
qimageblitz: Mark stack as non-executable (patch taken from Gentoo)

This allows applications such as okular and kolourpaint to run in
grsecurity kernels, which disallow executable stacks by default.
firefox: Add support for grsecurity
polkit: Add support for grsecurity
llvm: Add support for grsecurity
gcc: Add support for grsecurity
oraclejdk7: Add support for grsecurity
spidermonkey: Add support for grsecurity
gstreamer: Add support for grsecurity
grub: Add support for grsecurity
mesa-noglu: Add support for grsecurity
ghc: Add support for grsecurity

In this case, we also need to specify compilation flags to mark stacks as
non-executable, otherwise PaX will not allow ghc or binaries built by ghc
to run.  This is what gentoo-hardened does as well.
openjdkBootstrap: Add support for grsecurity
wine: Add support for grsecurity
binutils: Add PaX patch