Hi Brianm, On Fr 13 Jan 2012 04:04:38 CET "brian m. carlson" wrote:
On Fri, Jan 13, 2012 at 12:57:37AM +0100, Mike Gabriel wrote:On Fr 13 Jan 2012 00:37:57 CET Stefan Lippers-Hollmann wrote: >forked monolithic X.org 6.9 source tree. This is indeed the case.I can't speak for the ftpmasters and Security Team, but honestly I can't see why they would allow this in the archive or in any stable release, respectively.>Most likely with little to no bug-/ security fixes since 2005 - or am >I missing anything vital in that packaging git? Likewise the current >debian/copyright appears to lack all copyright notices of the original >XFree86/ X.org code, which makes up, by far, most of the source. The X2Go upstream team will be open to security and feature patches and will love to be pointed at security issues discovered. In the very very very long run there might be someone (we are currently talking about people in Austria being interested in such a project) who refactors NX for latest Xorg code, but currently what we can provide is an active maintenance of NoMachine's code.I think you're missing the issue here. Since X.org 6.9, there's been a lot of bug fixes and improved code. So you're essentially using an obsolete codebase with a new protocol hacked on. The Security Team does not like code copies. Porters do not like patching the same software again and again, except with slight differences that make it impossible to reuse the same patches[0].
Thanks for pointing that out more explicitly. I have been basically aware of this but probably not to its full extent.
And still, my basic (inner and outer) question is: 1. how can we enrol other people with our endeavour 2. what is needed to enrol people 3. is there anyonr in this discussion who can point us to next possible steps towards acceptance of the packagesI see a great use case for having a low-bandwidth, high-latency remote desktop solution in Debian and the X2Go people are really willing to make an effort to make X2Go server inclusion in Debian happen.
BTW: I got personal feedback from Marcelo Boveto Shima, FreeNX. The project has become silent, though not dead (as Stefan stated). I asked him to contribute to this thread...
Thanks, Mike -- DAS-NETZWERKTEAM mike gabriel, dorfstr. 27, 24245 barmissen fon: +49 (4302) 281418, fax: +49 (4302) 281419 GnuPG Key ID 0xB588399B mail: mike.gabr...@das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb
pgpk1JqnwITwW.pgp
Description: Digitale PGP-Unterschrift