[Pkg-nx-group] New situation with NX 3.0 and debian

[Stefan Lippers-Hollmann]

Hi

On Freitag, 6. Juli 2007, Paul van der Vlis wrote:
> Roberto C. Sánchez schreef:
> > On Thu, Jul 05, 2007 at 06:06:43PM +0200, Stefan Lippers-Hollmann wrote:
> >> The real serious issue are the NX libraries, which (still with NX 3.0)
> >> duplicate a lot of code from other upstream projects: - the whole X
> >> source tree (X.org 6.6 this time, instead of a radom XFree86 4.3
> >> development snapshot in the past) - esound 0.2.36, in comparison to an
> >> ancient pre- woody version until now - samba 3.0
> >> - GKrellM 2.2.10
> >> - OpenSSH 4.4p1
> >> TightVNC and rdesktop forks have fortunately been dropped with NX 3.0.
> >
> > I think that the code duplication is probably one of the biggest
> > hurdles to overcome for inclusion in Debian.  The security team will
> > *never* go for having forks of such critical items as openssh, X and
> > samba embedded into another package.
>
> Is the duplicated code changed?

The required protocol changes for are embedded into the forked code for 
nx-X11 and nxssh (only the client parts are actually used, which of course 
doesn't make it any prettier).

> Maybe there is a good reason to duplicate the code. E.g. the used Xorg
> version needs good testing with NX. What if a new Xorg come, and NX does
> not work with it?
>
> Fedora and Suse have FreeNX packages. How do they do it?

Gentoo, Fedora, Mandriva, SuSE (same for the unofficial packages I used to 
provide) do just minimal changes to get it compiling (with current 
compilers, against the system glibc, etc.) or change the install prefix (+ 
XFree86/ X.org security fixes that aren't integrated upstream), 
it "works(TM)" - but isn't any better, code duplication of ancient code 
bases doesn't seem to be an issue for them.

> With regards,
> Paul van der Vlis.

Regards
	Stefan Lippers-Hollmann
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part.
Url : http://lists.alioth.debian.org/pipermail/pkg-nx-group/attachments/20070706/dbc539c9/attachment.pgp