lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <alpine.LFD.0.98.0706150830020.14121@woody.linux-foundation.org>
Date:	Fri, 15 Jun 2007 08:45:43 -0700 (PDT)
From:	Linus Torvalds <torvalds@...ux-foundation.org>
To:	Carlo Wood <carlo@...noe.com>
cc:	Daniel Hazelton <dhazelton@...er.net>,
	Bernd Paysan <bernd.paysan@....de>,
	Theodore Tso <tytso@....edu>,
	Alexandre Oliva <aoliva@...hat.com>,
	Sean <seanlkml@...patico.ca>, Adrian Bunk <bunk@...sta.de>,
	Valdis.Kletnieks@...edu, Alan Cox <alan@...rguk.ukuu.org.uk>,
	Greg KH <greg@...ah.com>,
	debian developer <debiandev@...il.com>, david@...g.hm,
	Tarkan Erimer <tarkan@...one.net.tr>,
	linux-kernel@...r.kernel.org,
	Andrew Morton <akpm@...ux-foundation.org>, mingo@...e.hu
Subject: Re: Dual-Licensing Linux Kernel with GPL V2 and GPL V3



On Fri, 15 Jun 2007, Carlo Wood wrote:

> On Fri, Jun 15, 2007 at 06:33:51AM -0400, Daniel Hazelton wrote:
> > Incorrect. Read section 9 of the GPLv2. It's pretty clear that the "any later 
> > version" clause is optional. Whats more is that since the modern linux kernel 
> > *IS* a "composite work" composed of Linus' original code with changes 
> > contributed by other people - Linus retains copyright to the work as a whole. 
> 
> Huh - surely not to files added to the kernel that were written by
> others from scratch!

Actually, yes. Even to those - when they are part of "the whole".

I'm sorry, but I've learnt more about copyright law, and talked to more 
lawyers about licensing that probably most of the rest of the people 
involved in this discussion have *combined*.

And yes, at least under US copyright law, and at least if you see Linux as 
a "collective work" (which is arguably the most straightforward reading og 
copyright law, but perhaps not the only one) I am actually the sole owner 
of copyright in the *collective* work of the Linux kernel.

The way "collective works" work, there are two separate copyrights: there 
is the copyright in the "separate contribution", which is vests ininitally 
in the author of that contribution (unless he signs over his copyrights, 
often by virtue of working for somebody else).

And then there is the copyright in the "collective work", which would be 
me.

Of course, owning coyright in the "collective work" doesn't actually give 
me complete control anyway. I cannot relicense things in ways that go 
against the rules of the individual works. But in a very real sense, yes, 
I actually do own a certain (*limited*) copyright over even the parts that 
have not been explicitly signed over to me.

And yes, there are other potential ways to describe Linux, and in the end, 
it doesn't really matter. Because the way the GPLv2 works, it makes it 
clear that as long as a piece is a part of the whole, it has to be 
licensed under the GPLv2 and nothing else.

And btw, just to make you feel safe - I cannot do anything about that, 
even if I *do* own the copyright in the collective, because of the 
limitations on what that colletive work copyright implies (it says that I 
have the right to reproduce and distribute, but I don't have the right to 
*modify* except as given to me by the original author!)

So don't worry. I *technically* have certain special rights, but I 
practically speaking gave up most all of those rights by accepting code 
from others under the GPLv2 - since in order to do that, I had to agree to 
be bound by the GPLv2 license myself.

> This is totally new to me - if this is true - I'd really like to be sure!

It would be generally held to be true at least in the US, but it doesn't 
really matter.

> I always thought that it would be necessary to get signatures of each
> and every contributor before you can change a license of a file.

You are mostly correct. The "mostly" comes because I would not say "every 
contributor", but would clarify it by saying "every copyright holder". The 
difference? Not all contributions are necessarily copyrightable. If you 
send in trivial one-liners, we will credit you for them, but that does not 
automatically mean that you necessarily own copyright in something.

But yes, somebody who wrote an original file (that has some artistic 
expression, and isn't just a list of PCI ID's, for example) will be the 
copyright owner in that file. Some *very* few people have actually sent me 
paperwork to transfer the ownership of copyrights, but they seem to have 
done that because they were just used to doing it with the FSF, and I 
actually don't care. 

				Linus
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ