linux-kernel - Re: WTF? Re: [PATCH] License cleanup: add SPDX GPL-2.0 license identifier to files with no license

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Wed, 22 Nov 2017 18:53:46 +0100
From:   Greg Kroah-Hartman <gregkh@...uxfoundation.org>
To:     Pavel Machek <pavel@....cz>
Cc:     Philippe Ombredanne <pombredanne@...b.com>,
        Christoph Hellwig <hch@...radead.org>,
        Theodore Ts'o <tytso@....edu>,
        Alan Cox <gnomes@...rguk.ukuu.org.uk>,
        "Darrick J. Wong" <darrick.wong@...cle.com>,
        Eric Sandeen <sandeen@...hat.com>,
        xfs <linux-xfs@...r.kernel.org>,
        LKML <linux-kernel@...r.kernel.org>,
        Kate Stewart <kstewart@...uxfoundation.org>
Subject: Re: WTF? Re: [PATCH] License cleanup: add SPDX GPL-2.0 license
 identifier to files with no license

On Wed, Nov 22, 2017 at 06:07:13PM +0100, Pavel Machek wrote:
> Lets look at random file in usb:
> 
> // SPDX-License-Identifier: GPL-2.0+
> /*
>  * Driver for SMSC USB3503 USB 2.0 hub controller driver
>  *
>  * Copyright (c) 2012-2013 Dongjin Kim (tobetter@...il.com)
>  */
> ...
> MODULE_LICENSE("GPL");
> 
> ...do we agree that this is nowhere near distration-free? Ugly //
> comment that screams for attention, away from other copyright info, it
> hurts your eyes...
> 
> This would be improvement:
> 
> /*
>  * Driver for SMSC USB3503 USB 2.0 hub controller driver
>  *
>  * Copyright (c) 2012-2013 Dongjin Kim (tobetter@...il.com)
>  *
>  * SPDX-License-Identifier: GPL-2.0+
>  */
> 
> ...but what is above is just uuuugly.
> 
> ...as is MODULE_LICENSE having completely different tags from SPDX.
> 
> This would be even better:
> 
> /*
>  * Driver for SMSC USB3503 USB 2.0 hub controller driver
>  *
>  * Copyright (c) 2012-2013 Dongjin Kim (tobetter@...il.com)
>  */
> ...
> SPDX_MODULE_LICENSE("GPL-2.0+")
> 
> So yes, SPDX can be improvement. But in current implementation it is
> not.

Again, as people seem to keep still missing this point, Linus asked for
the format to look like it does today, using // at the top.  Thomas and
I originally did it first the way with the SPDX line in the big comment
block.

If you don't like the format, complain and convince him otherwise, you
are not getting anywhere by responding to this old topic about it
again.

Having it be the first line of the file is good, it's obvious, and
stands out, which is the point, you want it to, it's a license :)

thanks,

greg k-h