Typo/comment
nixos: evaluate assertions at toplevel, not at systemPackages

Fixes #2340
gdk-pixbuf: check for writable $out/.., closes #2115
wireshark: build with libcap (POSIX capabilities)

This makes running wireshark (or more specifically, dumpcap) as root a
bit more secure. From <wireshark-1.11.2>/doc/README.packaging:

  The "--with-libcap" option is only useful when dumpcap is installed
  setuid. If it is enabled dumpcap will try to drop any setuid privileges
  it may have while retaining the CAP_NET_ADMIN and CAP_NET_RAW
  capabilities. It is enabled by default, if the Linux capabilities
  library (on which it depends) is found.
wireshark: add myself (bjornfor) as maintainer
wireshark: add patch to lookup "dumpcap" in PATH

What this allows us to do is define a "dumpcap" setuid wrapper in NixOS
and have wireshark use that instead of the non-setuid dumpcap binary
that it normally uses.

As far as I can tell, the code that is changed to do lookup in PATH is
only used by wireshark/tshark to find dumpcap. dumpcap, the thing that's
typically setuid, is not affected by this patch. wireshark and tshark
should *not* be installed setuid, so the fact that they now do lookup in
PATH is not a security concern.

With this commit, and the following config, only "root" and users in the
"wireshark" group will have access to capturing network traffic with
wireshark/dumpcap:

  environment.systemPackages = [ pkgs.wireshark ];
  security.setuidOwners = [
    { program = "dumpcap";
      owner = "root";
      group = "wireshark";
      setuid = true;
      setgid = false;
      permissions = "u+rx,g+x";
    }
  ];
  users.extraGroups.wireshark.gid = 500;

(This wouldn't have worked before, because then wireshark would not use
our setuid dumpcap binary.)
haveged: Update from 1.7c to 1.9.1
Merge branch 'gdk-pixbuf' of git://github.com/lethalman/nixpkgs
gedit: new package

Official text editor of the GNOME desktop environment

https://wiki.gnome.org/Apps/Gedit
gnome3: moved file-roller from desktop/ to apps/
gnome3: moved gtksourceview from desktop/ to core/
gnome3: moved gnome-desktop from desktop/ to core/
libmediaart: new library used by gnome-music

Library tasked with managing, extracting and handling media art caches
xdg-user-dirs: fix finding default directory names
grilo: enable gobject introspection
gnome3: prioritize nautilus when opening inode/directory
seahorse: new package

Application for managing encryption keys and passwords in the GnomeKeyring

https://wiki.gnome.org/Apps/Seahorse
grilo: enable grl-net
grilo-plugins: new package

A collection of plugins for the Grilo framework

https://wiki.gnome.org/action/show/Projects/Grilo
totem: use grilo plugins