linux-kernel - Re: GPLv3 Position Statement

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <17692.26687.478584.156639@cse.unsw.edu.au>
Date:	Fri, 29 Sep 2006 10:26:39 +1000
From:	Neil Brown <neilb@...e.de>
To:	Linus Torvalds <torvalds@...l.org>
Cc:	Jörn Engel <joern@...nheim.fh-wedel.de>,
	Lennart Sorensen <lsorense@...lub.uwaterloo.ca>,
	Chase Venters <chase.venters@...entec.com>,
	Sergey Panov <sipan@...an.org>,
	Patrick McFarland <diablod3@...il.com>,
	Theodore Tso <tytso@....edu>,
	Alan Cox <alan@...rguk.ukuu.org.uk>,
	Jan Engelhardt <jengelh@...ux01.gwdg.de>,
	James Bottomley <James.Bottomley@...eleye.com>,
	linux-kernel <linux-kernel@...r.kernel.org>
Subject: Re: GPLv3 Position Statement

On Thursday September 28, torvalds@...l.org wrote:
> 
> 
> On Thu, 28 Sep 2006, Linus Torvalds wrote:
> > 
> > It should also be pointed out that even a "GPLv2 or later" project can be 
> > forked two different ways: you can turn it into a "GPLv3" (with perhaps a 
> > "or later" added too) project, but you can _equally_ turn it into a "GPLv2 
> > only" project.
> 
> Btw, it should be stated here: I'm not advocating either of the above. If 
> a license says "v2 or later", anybody who removes an explicit right 
> granted by the people who originally wrote and worked on the code is just 
> being a total a-hole.

But isn't that the whole point - to replace v2 by v3?
As v3 is almost uniformly more restrictive than v2, anyone having the
option of choosing v2 or v3 would naturally choose v2.
If there is to be no removal of the v2 license from "v2 or later"
code, then there is absolutely no point in the new license being a new
version of the GPL.  Rather it is a totally new license.
Now I know that is what you would prefer, but it seems obvious that it
isn't what the new FSF wants.
I would be very surprised if new versions of any FSF-control code is
available under v2 more than a few months after v3 becomes final.

> 
> Quite frankly, if the FSF ever relicenses any of their projects to be 
> "GPLv3 or later", I will hope that everybody immediately forks, and 
> creates a GPLv2-only copy (and yes, you have to do it immediately, or 
> you're screwed forever). That way the people involved can all vote with 
> their feet.

I don't see the urgency.  Why are you "screwed forever"?  You can
always take the last version that was available under a suitable
license and fork from there, just like OpenSSH did.

Sure: the longer you leave it the harder it will be to get critical
mass, but I don't see the need for it to be done immediately.

NeilBrown
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/