In Types.h, don't use STL internals on libc++ (605_nxcomp_Types.h-dont-use-STL-internals-on-libc++.full+lite.patch).

  The nx-libs-lite package does not compile on OS X Mavericks because
  Apple's clang compilers now default to compiling against the libc++ STL
  rather than (their outdated copy of) libstdc++.

  While the compiler still allows changing that, we should not rely on
  this being possible forever.

  The compiler chokes in Types.h, specifically the clear() methods in
  subclasses of vectors that use implementation details of the GNU STL.
  The attached patch fixes these compilation issues by not overriding the
  clear() method when compiling against libc++, since the libc++ headers
  seem to do essentially the same as the overriden method.

Be compliant with POS36-C: Observe correct revocation order while relinquishing privileges (602_nx-X11_initgroups.full.patch).

  The Fedora review of NX (redistributed) caught the following rpmlint issue:

  This executable is calling setuid and setgid without setgroups or initgroups.
  There is a high probability this mean it didn't relinquish all groups, and this
  would be a potential security issue to be fixed. Seek POS36-C on the web for
  details about the problem.

  Ref POS36-C:
  https://www.securecoding.cert.org/confluence/display/seccode/POS36-C.+Observe+correct+revocation+order+while+relinquishing+privileges

  This patch adds initgroups() calls to the code to initialize the supplemental group list.

Do not build bundled libraries (601_nx-X11_build-option-changes-to-not-use-bundled-libraries.full.patch).

  This commit has been submitted by Orion in two
  portions. One was submitted to X2Go BTS and created
  on Wed, 10 Jul 2013.

  The other portion has been taken from the Fedora
  package by Mike Gabriel and worked into this
  patch on Fri, 06 Dec 2013.

  We really want to make use of rpm's automatic dependency finding.
  Binaries are scanned for DT_NEEDED entries, the latter of which are
  then used for populating the "Requires"-type deps. The "nxagent"
  binary for example would require libX11.so.6. That incurs problems:

  1. A package manager told to install nxagent could select xorg-x11
  rather than nx-libs, even though nxagent depends on the NX version.

  2. A package manager told to install $some_program could select nx-libs
  rather than xorg-x11 (since both provide libX11.so.6), but, since
  the NX library is in an obscure directory, running $some_program
  would fail as libX11.so.6 is not found.

  To solve this, give the NX libraries unique names different from the
  Xorg ones.

Adapt paths of keystrokes.cfg if nxagent runs as x2goagent (321_nxagent_x2go-specific-keystroke-config.full.patch).

Make nxagent-specific keyboard bindings configurable (320_nxagent_configurable-keystrokes.full.patch).

  Replaces the hardcoded nxagent keybindings by a configurable
  table of keybindings. The default configuration is the same as the
  original one, to maintain compatibility. A user/administrator can either
  specify a command line parameter, environment variable or place a file
  in ~/.nx/config/keystrokes.cfg or /etc/nxagent/keystrokes.cfg to reconfigure
  these keybindings.

  The configuration file format is XML, a dependency on libxml2 is added
  to allow parsing the configuration.

Test for xkb/rules/base instead of xkb/keymap.dir for setting XkbBaseDir (302_nx-X11_xkbbasedir-detection.full.patch).

  In recent (as of 2014/06) X.org release, the keymap.dir file
  has become obsolete. Let's test for the xkb/rules/base file
  instead.

Was needed and was tested on Ubuntu 14.04.

  Many distributions have a policy to reduce code duplications.
  One means to avoid such duplications is to use shared libraries
  instead of using libs that are ofter shipped for convenience.

  Fedora:
  http://fedoraproject.org/wiki/Packaging:Guidelines#Shared_Libraries

  Debian (Section 10.7.4 of Debian policy):
  http://www.debian.org/doc/debian-policy/ch-files.html

  Depending on the binary name of the agent either NXAgent
  or X2GoAgent is set as WM_Class.

  This is needed for some window managers (like the one shipped with
  Maemo)

  The original WM_CLASS patch has been taken from the FreeNX patch
  series, author unknown.

  The nxagent/x2goagent has been done by the X2Go Project, author
  see below.

Force NX proxy to bind to loopback devices only (loopback option) (220_nxproxy_bind-loopback-only.full+lite.patch).

Set default pack and link options to avoid damage of session (211_nxcomp_set_default_options.full+lite.patch).

  210_nxagent_save_session_state.full.patch
  210_nxcomp_save_session_state.full+lite.patch

  This patch adds a "state" option to NX (agent) which
  allows one to specify a file where nxagent will write
  its session state into.

Fix XFIXES selection handling (copy and paste via middle mouse button) (207_nxagent_fix-xfixes-selection.full.patch).

  When nxagent has the XFIXES extension enabled copy and
  paste from outside applications to applications within the session
  that rely on XFixesSelectSelectionInput (e.g. qt applications like
  konsole) did never receive any notifications because the nxagent did
  not register itself at the real X server to receive them. Fixes X2Go Bug
  #585 (http://bugs.x2go.org/585).

Fix repainting of SolidFill pictures with libcairo > 1.12.x (204_nxagent_repaint-solidpict.full.patch).

  This change enables to launch an nxagent in rootless mode
  that waits forever for Xclients to appear.

  This feature got added when X2Go introduced Published Applications
  support.

  This patch adds Xinerama awareness to NX agent windows.

  The advantage of Xinerama awareness is that an NX session window
  will only maximize to the dimensions of the active physical
  display.

X2Go icon when run with x2goagent flavour (201_nxagent_set-x2go-icon-if-x2goagent-flavour.full.patch).

  Depending on the binary name of the agent either nxagent.xpm
  or x2go.xpm is used as window icon.

  Whether the agent runs in X2Go or NX mode is decide by the
  name of the binary that executes the code.

  Binary name equal to nxagent -> (Free)NX flavour
  Binary name equal to x2goagent -> X2Go flavour

  It is allowed to try and allocate a pixmap which is larger than
  32767 in either dimension. However, all of the framebuffer code
  is buggy and does not reliably draw to such big pixmaps, basically
  because the Region data structure operates with signed shorts
  for the rectangles in it.

  Furthermore, several places in the X server computes the
  size in bytes of the pixmap and tries to store it in an
  integer. This integer can overflow and cause the allocated size
  to be much smaller.

  So, such big pixmaps are rejected here with a BadAlloc

  Originally contributed by FreeNX Team

  Wine close delay.

  Originally contributed by FreeNX team (dimbor).

  Do not send COMPOUND_TEXT to client.

  Originally contributed by FreeNX Team (dimbor).

  Enable UTF-8 clipboard copies.

  Originally contributed by FreeNX Team (dimbor).

Export remote keyboard configuration to session directory (105_nxagent_export-remote-keyboard-config.full.patch)

  Let nxagent write the keyboard configuration to <session_directory>/keyboard
  and make it available within the NX session.

  This patch is needed for Tarball installation and on Distros like
  Debian, not reporting this path addition to upstream.

  Originally contributed by FreeNX Team.

  This patch is needed for Tarball installation mode of NX (redistributed)
  only, not reporting this path change to upstream.

  This patch is needed on Debian only, not reporting this path
  addition to upstream.

  Patch was modified by Mike Gabriel <mike.gabriel@das-netzwerkteam.de>

Create Windows and fix drawing issues on Big Endian 64bit systems (057_nx-X11_sanitize-eventmasks.full.patch).

  Multiple endiannes issues were setting incorrect event masks when creating and
  drawing X11 windows.

  This time, a smaller integer has been casted to a bigger one and passed to some
  function actually setting its value.

  This meant, that garbage from stack was attached to the smaller integer value,
  putting unknown memory into the lower bytes of the bigger integer.

  Fix this by creating a big, initialized temporary variable, let the function do
  its magic on that one and pass the value back to the smaller variable--and
  cross your fingers the smaller variable can hold it without overrunning. (The
  last bit is a design issue we can't really fix and has been around even before
  this patch.)

  The below patch fixes more -Werror=format-security errors.
  Interestingly, most of the errors only showed up on our arm builds.  No
  idea why.