This is what all the other ddx variants use, so do the same in Xvnc to
be consistent.

Makes it easier to compare with upstream files as the formatting will be
the same.

RENDER has been mandatory since xorg-server 1.9, so remove these
checks.

This should only be in the ddx parts of an X server, and Input.c is used
by libvnc.so as well and can cause conflicts there.

This was removed from Ubunut's X.org packages years ago, so drop it from
our packing as well.

We miscalculated the screen layout if the geometry had an offset as we
adjusted the real screen layout to account for the offset, but compared
it to the unadjusted geometry.

Is a lot more useful default than the previous "x11", or "x0vncserver".
At the same time give x0vncserver a parameter to change the name.

Let's avoid making this too complex and force every user to know about
magical functions.

Allows the default value to be dynamically generated in a buffer that is
reused.

Better to just hide these parameters rather than stating that they are
unused in the man page.

Our current architecture doesn't support waiting for a response here, so
don't even try or we'll just get an error.

The session might have died, or failed to initialise properly, so be
prepared for gnutls_bye() to be unable to do its job.

We would leak the security module below the top client VeNCrypt module,
meaning that those modules would not get a chance to shut down
gracefully.

It's perfectly safe to delete NULL pointers, so simplify things by
removing these checks.

Gives us a more meaningful error rather than just "Error in push/pull
function".

Having this early check means that we somewhat randomly get different
exception behaviours on errors in deeper layers as some exceptions are
allowed to propagate unhindered and some are not (since they are thrown
in the pull function).

Give GnuTLS the correct errno from deeper layers, in the cases where we
know it. In most cases GnuTLS doesn't care, but just in case...

Travis has unfortunately been severely rate limited by Docker Hub so we
have to switch to GitHub, which has an agreement with Docker to avoid
the rate limiting.

No TTY is provided in GitHub's environment, so we cannot have this flag.

Otherwise cmake breaks as it requires a newer version without properly
listing that in its dependencies.

These are incompatible with functions such as gettext() as clang hasn't
implemented the function attribute function_arg.

A initial workflow needs to be defined for actions to trigger on pull
requests, so just add a minimal, dummy one.

CharArray should always be null-terminated. There is a potential
scenario where this all might lead to crash. In Password we call
memset(), passing length of the array we get with strlen(), but
this won't return correct value when the array is not properly
null-terminated.

Give people a chance to know about the documentation.

It's almost mandatory to specify "session", but fairly rare to need to
set "desktop", so let's tweak the examples to avoid confusion and
mistakes.

The new vnc_home_t type for HOME/.vnc directory was added to the policy,
backed by a name transition. The vnc_session_t domain can manage files
and directories of this type.

The permissions set to manage directories and files with the nfs_t type
is allowed when the use_nfs_home_dirs boolean is turned on.

Resolves: https://github.com/TigerVNC/tigervnc/issues/1189

Sections and rules blocks reordered according to the Style guide.

https://github.com/TresysTechnology/refpolicy/wiki/StyleGuide

Style guide [1] issues only. No impact on policy functionality.

[1] - https://github.com/TresysTechnology/refpolicy/wiki/StyleGuide

Build flags control where this file ends up, so avoid assuming a
specific path in the HOWTO.

The line width was very inconsitent in this file, so standardise on the
common 72 characters.

The old method used a very slow frame rate with small steps,
which made it obnoxious during use.  The new method has a few
improvements:

- Calculates "edge" region width automatically, as a ratio of
  the viewport size.  Default is 1/16th.

- Uses a different edge width for x and y, which works better
  on very wide or very tall screens.

- Increased default frame rate from 10 fps to 60 fps.

- Replaced hardcoded frame rate with a #define.

- Reduced maximum movement per frame slightly, because the
  frame rate is so much faster.  The overall result is still much
  faster, but also easier to do small adjustments with.

- Fixed off-by-one error in scroll rate calculation formula.  Left/up
  scrolls were faster than down/right, but this is fixed.

This makes it more comfortable to use TigerVNC on a small screen
to work on a larger screen for hours at a time.

Incorrect format strings can cause crashes, so we want to catch those
early.