aboutsummaryrefslogtreecommitdiff
path: root/debian/patches
Commit message (Collapse)AuthorAgeFilesLines
* Be compliant with POS36-C: Observe correct revocation order while ↵Orion Poplawski2015-02-132-68/+0
| | | | | | | | | | | | | | | | relinquishing privileges (602_nx-X11_initgroups.full.patch). The Fedora review of NX (redistributed) caught the following rpmlint issue: This executable is calling setuid and setgid without setgroups or initgroups. There is a high probability this mean it didn't relinquish all groups, and this would be a potential security issue to be fixed. Seek POS36-C on the web for details about the problem. Ref POS36-C: https://www.securecoding.cert.org/confluence/display/seccode/POS36-C.+Observe+correct+revocation+order+while+relinquishing+privileges This patch adds initgroups() calls to the code to initialize the supplemental group list.
* Do not build bundled libraries ↵Orion Poplawski2015-02-132-100/+0
| | | | | | | | | | | | (601_nx-X11_build-option-changes-to-not-use-bundled-libraries.full.patch). This commit has been submitted by Orion in two portions. One was submitted to X2Go BTS and created on Wed, 10 Jul 2013. The other portion has been taken from the Fedora package by Mike Gabriel and worked into this patch on Fri, 06 Dec 2013.
* Unique Library Names Patch ↵Jan Engelhardt2015-02-132-1184/+0
| | | | | | | | | | | | | | | | | | | | (600_nx-X11+nxcompext+nxcompshad_unique-libnames.full.patch). We really want to make use of rpm's automatic dependency finding. Binaries are scanned for DT_NEEDED entries, the latter of which are then used for populating the "Requires"-type deps. The "nxagent" binary for example would require libX11.so.6. That incurs problems: 1. A package manager told to install nxagent could select xorg-x11 rather than nx-libs, even though nxagent depends on the NX version. 2. A package manager told to install $some_program could select nx-libs rather than xorg-x11 (since both provide libX11.so.6), but, since the NX library is in an obscure directory, running $some_program would fail as libX11.so.6 is not found. To solve this, give the NX libraries unique names different from the Xorg ones.
* Allow version 4-digit version comparison/handshake ↵Nito Martinez2015-02-132-241/+0
| | | | (400_nxcomp-version.full+lite.patch).
* Adapt paths of keystrokes.cfg if nxagent runs as x2goagent ↵Horst Schirmeier2015-02-132-26/+0
| | | | (321_nxagent_x2go-specific-keystroke-config.full.patch).
* Make nxagent-specific keyboard bindings configurable ↵Alexander Wuerstlein2015-02-132-1032/+0
| | | | | | | | | | | | | | (320_nxagent_configurable-keystrokes.full.patch). Replaces the hardcoded nxagent keybindings by a configurable table of keybindings. The default configuration is the same as the original one, to maintain compatibility. A user/administrator can either specify a command line parameter, environment variable or place a file in ~/.nx/config/keystrokes.cfg or /etc/nxagent/keystrokes.cfg to reconfigure these keybindings. The configuration file format is XML, a dependency on libxml2 is added to allow parsing the configuration.
* Test for xkb/rules/base instead of xkb/keymap.dir for setting XkbBaseDir ↵Mike Gabriel2015-02-132-85/+0
| | | | | | | | (302_nx-X11_xkbbasedir-detection.full.patch). In recent (as of 2014/06) X.org release, the keymap.dir file has become obsolete. Let's test for the xkb/rules/base file instead.
* Use shared libraries (301_nx-X11_use-shared-libs.full.patch).Jan Engelhardt2015-02-102-107/+0
| | | | | | | | | | | | Many distributions have a policy to reduce code duplications. One means to avoid such duplications is to use shared libraries instead of using libs that are ofter shipped for convenience. Fedora: http://fedoraproject.org/wiki/Packaging:Guidelines#Shared_Libraries Debian (Section 10.7.4 of Debian policy): http://www.debian.org/doc/debian-policy/ch-files.html
* Set WM_CLASS to X2GoAgent/NXAgent (300_nxagent_set-wm-class.full.patch).Oleksandr Shneyder2015-02-102-61/+0
| | | | | | | | | | | | | | Depending on the binary name of the agent either NXAgent or X2GoAgent is set as WM_Class. This is needed for some window managers (like the one shipped with Maemo) The original WM_CLASS patch has been taken from the FreeNX patch series, author unknown. The nxagent/x2goagent has been done by the X2Go Project, author see below.
* Force NX proxy to bind to loopback devices only (loopback option) ↵Mike Gabriel2015-02-102-131/+0
| | | | (220_nxproxy_bind-loopback-only.full+lite.patch).
* Fix FTBFS of nxproxy/nxcomp on Android ↵Nito Martinez2015-02-102-254/+0
| | | | (212_nxcomp_build-on-Android.full+lite.patch).
* Set default pack and link options to avoid damage of session ↵Oleksandr Shneyder2015-02-102-28/+0
| | | | (211_nxcomp_set_default_options.full+lite.patch).
* Save session state in file.Oleksandr Shneyder2015-02-103-193/+0
| | | | | | | | | 210_nxagent_save_session_state.full.patch 210_nxcomp_save_session_state.full+lite.patch This patch adds a "state" option to NX (agent) which allows one to specify a file where nxagent will write its session state into.
* Add x2goagent man page (209_x2goagent_add-man-page.full.patch).Mike Gabriel2015-02-102-42/+0
|
* Fix XFIXES selection handling (copy and paste via middle mouse button) ↵Ulrich Sibiller2015-02-102-34/+0
| | | | | | | | | | | (207_nxagent_fix-xfixes-selection.full.patch). When nxagent has the XFIXES extension enabled copy and paste from outside applications to applications within the session that rely on XFixesSelectSelectionInput (e.g. qt applications like konsole) did never receive any notifications because the nxagent did not register itself at the real X server to receive them. Fixes X2Go Bug #585 (http://bugs.x2go.org/585).
* Add -clipboard cmdline option to nxagent ↵Mike Gabriel2015-02-102-54/+0
| | | | (206_nxagent_clipboard-as-nxoption.full.patch).
* Fix refresh errors on Win2012 RDP connections with speed=ADS ↵Oleksandr Shneyder2015-02-102-15/+0
| | | | (205_nxagent_refresh-adsl.full.patch).
* Fix repainting of SolidFill pictures with libcairo > 1.12.x ↵Oleksandr Shneyder2015-02-102-54/+0
| | | | (204_nxagent_repaint-solidpict.full.patch).
* Add -norootlessexit cmdline option to nxagent ↵Oleksandr Shneyder2015-02-102-64/+0
| | | | | | | | | | (203_nxagent_disable-rootless-exit.full.patch). This change enables to launch an nxagent in rootless mode that waits forever for Xclients to appear. This feature got added when X2Go introduced Published Applications support.
* Enable Xinerama support for NX (202_nx-X11_enable-xinerama.full.patch).Oleksandr Shneyder2015-02-102-293/+0
| | | | | | | | This patch adds Xinerama awareness to NX agent windows. The advantage of Xinerama awareness is that an NX session window will only maximize to the dimensions of the active physical display.
* X2Go icon when run with x2goagent flavour ↵Oleksandr Shneyder2015-02-102-220/+0
| | | | | | | (201_nxagent_set-x2go-icon-if-x2goagent-flavour.full.patch). Depending on the binary name of the agent either nxagent.xpm or x2go.xpm is used as window icon.
* Detect nxagent/x2goagent flavour ↵Oleksandr Shneyder2015-02-102-65/+0
| | | | | | | | | | (200_nxagent_check-binary-x2go-flavour.full.patch). Whether the agent runs in X2Go or NX mode is decide by the name of the binary that executes the code. Binary name equal to nxagent -> (Free)NX flavour Binary name equal to x2goagent -> X2Go flavour
* Avoid large pixmaps (110_nxagent_createpixmap-bounds-check.full.patch).Mike Gabriel2015-02-102-45/+0
| | | | | | | | | | | | | | | | | It is allowed to try and allocate a pixmap which is larger than 32767 in either dimension. However, all of the framebuffer code is buggy and does not reliably draw to such big pixmaps, basically because the Region data structure operates with signed shorts for the rectangles in it. Furthermore, several places in the X server computes the size in bytes of the pixmap and tries to store it in an integer. This integer can overflow and cause the allocated size to be much smaller. So, such big pixmaps are rejected here with a BadAlloc Originally contributed by FreeNX Team
* Wine Close Delay (108_nxagent_wine-close-delay.full.patch).Mike Gabriel2015-02-102-61/+0
| | | | | | Wine close delay. Originally contributed by FreeNX team (dimbor).
* Prevent sending COMPOUND_TEXT ↵Mike Gabriel2015-02-102-48/+0
| | | | | | | | (107_nxagent_clipboard-compound-text+small-bed-sheets.full.patch). Do not send COMPOUND_TEXT to client. Originally contributed by FreeNX Team (dimbor).
* UTF-8 Clipboard copying (106_nxagent_utf8-copy-clipboard.full.patch).Mike Gabriel2015-02-102-53/+0
| | | | | | Enable UTF-8 clipboard copies. Originally contributed by FreeNX Team (dimbor).
* Export remote keyboard configuration to session directory ↵Marcelo Boveto Shima2015-02-102-97/+0
| | | | | | | (105_nxagent_export-remote-keyboard-config.full.patch) Let nxagent write the keyboard configuration to <session_directory>/keyboard and make it available within the NX session.
* FHS path fix for keyboard config file ↵Mike Gabriel2015-02-102-41/+0
| | | | | | | | | (103_nxagent_set-X0-config-path.full.patch). This patch is needed for Tarball installation and on Distros like Debian, not reporting this path addition to upstream. Originally contributed by FreeNX Team.
* FHS path fix for SecurityPolicy file ↵Marcelo Boveto Shima2015-02-102-20/+0
| | | | | | | (102_xserver-xext_set-securitypolicy-path.full.patch). This patch is needed for Tarball installation mode of NX (redistributed) only, not reporting this path change to upstream.
* FHS path fix for rgb fileMarcelo Boveto Shima2015-02-102-20/+0
| | | | | | | This patch is needed on Debian only, not reporting this path addition to upstream. Patch was modified by Mike Gabriel <mike.gabriel@das-netzwerkteam.de>
* Create Windows and fix drawing issues on Big Endian 64bit systems ↵Mihai Moldovan2015-02-102-71/+0
| | | | | | | | | | | | | | | | | | | (057_nx-X11_sanitize-eventmasks.full.patch). Multiple endiannes issues were setting incorrect event masks when creating and drawing X11 windows. This time, a smaller integer has been casted to a bigger one and passed to some function actually setting its value. This meant, that garbage from stack was attached to the smaller integer value, putting unknown memory into the lower bytes of the bigger integer. Fix this by creating a big, initialized temporary variable, let the function do its magic on that one and pass the value back to the smaller variable--and cross your fingers the smaller variable can hold it without overrunning. (The last bit is a design issue we can't really fix and has been around even before this patch.)
* Fix -Werror=format-security errors ↵Orion Poplawski2015-02-092-108/+0
| | | | | | | | (056_nx-X11_Werror-format-security.full.patch). The below patch fixes more -Werror=format-security errors. Interestingly, most of the errors only showed up on our arm builds. No idea why.
* Fix FTBFS when compiled with -Werror=format-security ↵Orion Poplawski2015-02-092-1091/+0
| | | | (055_nx-X11_imake-Werror-format-security.full.patch).
* Fix FTBFS on ppc64 architecture (054_nx-X11_ppc64-ftbfs.full.patch).Orion Poplawski2015-02-092-15/+0
|
* Avoid building libXcomp.so.1 (which is identical to libXcomp.so.3), ↵Orion Poplawski2015-02-092-33/+0
| | | | (053_nx-X11_no-xcomp1-install-target.full.patch).
* Fix nxauth location on Mac OS X 10 ↵Mihai Moldovan2015-02-092-42/+0
| | | | (052_nxcomp_macos10-nxauth-location.full+lite.patch)
* workaround for Mac OS X 10.5 (051_nxcomp_macos105-fdisset.full+lite.patch(Mihai Moldovan2015-02-092-83/+0
| | | | | | | | | | | The Mac OS X 10.5 SDK requires the second argument of FD_ISSET to be writeable, although it does only access the data. Given that we have a const pointer for a const struct, copy and pass that. . Note that this is merely a workaround for OS X 10.5, as 10.6 and later define the second argument of FD_ISSET as const struct const *foo, too. . It is safe, as data is accessed read-only by FD_ISSET, even on 10.5.
* Description: Enable parallel make (031_nx-X11_parallel-make.full.patch).Jan Engelhardt2015-02-092-201/+0
| | | | | | Restore ability to build things in parallel. (${MAKE} must always appear in the rule directly, and not be hidden through expansions of other variables to get this to work.)
* Allow to pass in configure args (030_nx-X11_configure-args.full.patch).Jan Engelhardt2015-02-092-52/+0
|
* Fix BIGENDIAN issue in nxcomp (relevant on PPC64 arch) ↵Mihai Moldovan2015-02-092-18/+0
| | | | (029_nxcomp_ppc64.full+lite.patch)
* Support abstract local sockets for Linux systems ↵Mike Gabriel2015-02-092-322/+0
| | | | | | (028_nx-X11_abstract-kernel-sockets.full.patch). Relevant code taken from xtrans 1.2.7 on 2014-06-11.
* Add X11 abstract socket support to nxcomp/nxproxy ↵Mike Gabriel2015-02-092-60/+0
| | | | (027_nxcomp_abstract-X11-socket.full+lite.patch).
* Honour compiler/linker option flags.Orion Poplawski2015-02-094-68/+0
| | | | | | 026_nxcompext_honour-optflags.full.patch 026_nxcomp_honour-optflags.full+lite.patch 026_nxcompshad_honour-optflags.full.patch
* Fix FTBFS against libjpeg9a ↵Gabriel Marcano2015-02-092-41/+0
| | | | (025_nxcomp-fix-ftbfs-against-jpeg9a.full+lite.patch).
* nxcomp*, nxproxy: Fix clean-up of source tree via Makefile.in templates.Mike Gabriel2015-02-093-72/+0
| | | | | 024_fix-make-clean.full.patch 024_fix-make-clean.full+lite.patch
* FHS adaptation for Debian packaging (016_nx-X11_install-location.full.patch).Mike Gabriel2015-02-092-155/+0
| | | | | | | | | From tarball, NX libraries and binaries are installed to /usr/local/lib/nx. . FIXME: The paths in this patch get superceded by current build logic in nx-libs.spec and debian/rules. This should be merged into the NX build logic finally.
* nxcomp*,nxproxy: Add clean rules to Makefile.in templates.Mike Gabriel2015-02-095-254/+0
|
* Work on man pages.Mike Gabriel2015-02-094-198/+0
| | | | | | 009_nxproxy_add-man-page.full+lite.patch 009_nxagent_add-man-page.full.patch 010_nxauth_fix-binary-name-in-man-page.full.patch
* sa_restorer vs. memset (008_nxcomp_sa-restorer.full+lite.patch).Mike Gabriel2015-02-092-47/+0
| | | | | | Use memset instead of setting sa_restorer to NULL. Original-Author: Alexander Morozov
* Remove .gch files during cleanup (007_nxcompshad_clean-gch-files.full.patch).Mike Gabriel2015-02-092-18/+0
| | | | | When building nxcompshad .gch files get created. On cleanup these should be removed.
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-18 21:20:19 +0000