Unverified Commit 2839911e authored by Alexander Bantyev's avatar Alexander Bantyev
Browse files

various: add security-review team as a maintainer 

Adds the @NixOS/security-review team as a maintainer to multiple
packages deemed to be important security-wise.

For the motivation of the package list, see:
https://github.com/NixOS/nixpkgs/issues/494349#issuecomment-4005099033
parent c7c5c0b2

pkgs/applications/networking/sync/rsync/default.nix

+1 −0
Original line number Diff line number Diff line
@@ -92,6 +92,7 @@ stdenv.mkDerivation rec { 
    maintainers = with lib.maintainers; [

      ivan

    ];

    teams = [ lib.teams.security-review ];

    platforms = lib.platforms.unix;

    identifiers.cpeParts = {

      vendor = "samba";

pkgs/by-name/au/audit/package.nix

+1 −0
Original line number Diff line number Diff line
@@ -170,6 +170,7 @@ stdenv.mkDerivation (finalAttrs: { 
    changelog = "https://github.com/linux-audit/audit-userspace/releases/tag/v4.1.2";

    license = lib.licenses.gpl2Plus;

    maintainers = with lib.maintainers; [ grimmauld ];

    teams = [ lib.teams.security-review ];

    pkgConfigModules = [

      "audit"

      "auparse"

pkgs/by-name/bo/boehmgc/package.nix

+1 −0
Original line number Diff line number Diff line
@@ -119,6 +119,7 @@ stdenv.mkDerivation (finalAttrs: { 
    changelog = "https://github.com/bdwgc/bdwgc/blob/v${finalAttrs.version}/ChangeLog";

    license = lib.licenses.boehmGC;

    maintainers = [ ];

    teams = [ lib.teams.security-review ];

    platforms = lib.platforms.all;

    identifiers.cpeParts =

      lib.meta.cpeFullVersionWithVendor "boehm-demers-weiser" finalAttrs.version

pkgs/by-name/ca/cacert/package.nix

+1 −0
Original line number Diff line number Diff line
@@ -33,6 +33,7 @@ let 
      fpletz

      lukegb

    ];

    teams = [ lib.teams.security-review ];

    license = lib.licenses.mpl20;

    identifiers.cpeParts = lib.meta.cpeFullVersionWithVendor "mozilla" version // {

      product = "nss";

pkgs/by-name/cu/curlMinimal/package.nix

+1 −0
Original line number Diff line number Diff line
@@ -285,6 +285,7 @@ stdenv.mkDerivation (finalAttrs: { 
    maintainers = with lib.maintainers; [

      Scrumplex

    ];

    teams = [ lib.teams.security-review ];

    platforms = lib.platforms.all;

    # Fails to link against static gss

    broken = stdenv.hostPlatform.isStatic && gssSupport;