===== RG: r/backports =====
Linux: Set passthru attr to contain full passthru

This fixes #1566, thanks @wizeman

Signed-off-by: Shea Levy <shea@shealevy.com>
kernel.passthru: Don't include meta to be consistent with stdenv.mkDerivation

Signed-off-by: Shea Levy <shea@shealevy.com>
grsecurity: Fix build under new generic kernel derivation
grsecurity: Update stable and test patches

stable: 3.0-3.2.53-201312021727 -> 3.0-3.2.54-201401191012
test:   3.0-3.12.2-201312021733 -> 3.0-3.12.8-201401191015
===== RG: r/zfstools =====
zfstools: Add new package

zfstools is an OpenSolaris-like and compatible auto snapshotting script
for ZFS, which also supports auto snapshotting mysql databases.
===== RG: r/zfs-import =====
zfs: Fix libblkid detection (backport from upstream)

This fixes issues with importing ZFS pools, such as when the ZFS device is a
partition that covers the end of the disk.

See: https://github.com/zfsonlinux/zfs/issues/1684
zfs: Don't look for devices only in /dev

If we don't give out a directory to 'zpool import', it will use libblkid
to automatically find all existing ZFS devices.
===== RG: r/grsecurity =====
paxctl: New package

A tool for controlling PaX flags on a per binary basis.
gradm: New package

grsecurity's RBAC administration utility.
spl: Fix compilation with grsecurity's constify plugin and kernels < 3.8
qimageblitz: Mark stack as non-executable (patch taken from Gentoo)

This allows applications such as okular and kolourpaint to run in
grsecurity kernels, which disallow executable stacks by default.
firefox: Add support for grsecurity
chromium: Add support for grsecurity
polkit: Add support for grsecurity
llvm: Add support for grsecurity
gcc: Add support for grsecurity