pythonPackages: sqlalchemy-imageattach, fix tests on darwin
grsecurity: Fix GRKERNSEC_PROC restrictions

Previously we were setting GRKERNSEC_PROC_USER y, which was a little bit
too strict. It doesn't allow a special group (e.g. the grsecurity group
users) to access /proc information - this requires
GRKERNSEC_PROC_USERGROUP y, and the two are mutually exclusive.

This was also not in line with the default automatic grsecurity
configuration - it actually defaults to USERGROUP (although it has a
default GID of 1001 instead of ours), not USER.

This introduces a new option restrictProcWithGroup - enabled by default
- which turns on GRKERNSEC_PROC_USERGROUP instead. It also turns off
restrictProc by default and makes sure both cannot be enabled.

Signed-off-by: Austin Seipp <aseipp@pobox.com>
gtk3: bugfix update 3.12.0 -> .1
haskell: update yi to 0.8.1
Merge pull request #2230 from bennofs/update-yi

haskell: update yi to 0.8.1
Change several package constraints from linux to unix

They all build on Darwin.
Merge pull request #2231 from jwiegley/master

Change several package constraints from linux to unix
Merge pull request #2184 from offlinehacker/pkgs/pythonPacakges/sqlalchemy-imageattach_darwin_fix

pythonPackages: sqlalchemy-imageattach, fix tests on darwin
keepassx: Renamed KeePassX 2.0 to keepassx2.
nixos: add a UID for Hydra

Otherwise the Hydra module can't be used when mutableUsers = false;

Signed-off-by: Austin Seipp <aseipp@pobox.com>
Patch python27 for CVE-2014-1912.
Patch python32 for CVE-2014-1912.
Merge pull request #2233 from ertes/ertes-keepassx-split

keepassx: Renamed KeePassX 2.0 to keepassx2.
cgit: bump git version to 1.9.2

This also updates the download URL to use kernel.org

Signed-off-by: Austin Seipp <aseipp@pobox.com>
haskell: add monad-extras
lttng project: update from 2.3.0 to 2.4.1

(And update liburcu to 0.8.4 according to release notes for lttng 2.4.x.)

In addition to new features and bug fixes, version 2.4.x is needed to build
against Linux 3.12 (our new stable kernel).
babeltrace: update from 1.1.1 to 1.2.1
new package: cinnamon-settings-daemon (close #2205)

With tiny changes from @vcunat.
nixos: extend documentation example for security.setuidOwners

Show that it is possible to set custom permission bits.
Merge pull request #2235 from bennofs/haskell-monad-extras

haskell: add monad-extras