linux-kernel - Re: Dual-Licensing Linux Kernel with GPL V2 and GPL V3

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Mon, 18 Jun 2007 16:20:18 -0300
From:	Alexandre Oliva <aoliva@...hat.com>
To:	david@...g.hm
Cc:	Greg KH <greg@...ah.com>, Al Viro <viro@....linux.org.uk>,
	Daniel Hazelton <dhazelton@...er.net>,
	Bron Gondwana <brong@...tmail.fm>, Ingo Molnar <mingo@...e.hu>,
	Alan Cox <alan@...rguk.ukuu.org.uk>,
	Linus Torvalds <torvalds@...ux-foundation.org>,
	debian developer <debiandev@...il.com>,
	Tarkan Erimer <tarkan@...one.net.tr>,
	linux-kernel@...r.kernel.org,
	Andrew Morton <akpm@...ux-foundation.org>
Subject: Re: Dual-Licensing Linux Kernel with GPL V2 and GPL V3

On Jun 18, 2007, david@...g.hm wrote:

> do you realize that redhat uses checksums or signatures to check the
> validity of their CD's?

Yes.  How does this stop the users from enjoying any of the freedoms?

> I seriously doubt if redhat tells you how to how to generate such a
> checksum/signature.

Mixing two different issues here.

The checksums embedded in the ISO images are implemented in anaconda
itself, provided along with the distro, so anyone can generate them,
even though I don't know the precise algorithm.  The checksums over
the ISO images themselves are implemented with sha1sum (earlier,
md5sum), so anyone can generate them too.

As for the GPG signatures in the RPMs and in the SHA1SUM file, these
are indeed generated using public algorithms but private keys.  But
these signatures are not functional, and they don't in any way stop
anyone from enjoying freedoms.

> in addition to the problem that Linus points out about being unable to
> change the contents of the write-only CD this would seem to conflict
> with what you are claiming the GPL is supposed to allow.

It looks like you read only Linus' messages, not my responses.  A
write-only CD is like ROM.  It's not the distributor who's imposing
restrictions on its modification.  Nobody can modify it because nature
says so.  It's not like the software is being recorded in a CD as a
means to prevent you from modifying it.

-- 
Alexandre Oliva         http://www.lsd.ic.unicamp.br/~oliva/
FSF Latin America Board Member         http://www.fsfla.org/
Red Hat Compiler Engineer   aoliva@...dhat.com, gcc.gnu.org}
Free Software Evangelist  oliva@...d.ic.unicamp.br, gnu.org}
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/