lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date:	Tue, 19 Jun 2007 02:28:27 -0400
From:	Daniel Hazelton <dhazelton@...er.net>
To:	Alexandre Oliva <aoliva@...hat.com>
Cc:	Alan Cox <alan@...rguk.ukuu.org.uk>, Ingo Molnar <mingo@...e.hu>,
	Linus Torvalds <torvalds@...ux-foundation.org>,
	Greg KH <greg@...ah.com>,
	debian developer <debiandev@...il.com>, david@...g.hm,
	Tarkan Erimer <tarkan@...one.net.tr>,
	linux-kernel@...r.kernel.org,
	Andrew Morton <akpm@...ux-foundation.org>,
	Chris Friesen <cfriesen@...tel.com>,
	Bernd Schmidt <bernds_cb1@...nline.de>,
	Robin Getz <rgetz@...ckfin.uclinux.org>,
	Rob Landley <rob@...dley.net>,
	Bron Gondwana <brong@...tmail.fm>,
	Al Viro <viro@....linux.org.uk>
Subject: Re: mea culpa on the meaning of Tivoization

On Tuesday 19 June 2007 02:10:02 Alexandre Oliva wrote:
> On Jun 19, 2007, Daniel Hazelton <dhazelton@...er.net> wrote:
> > I haven't looked at it, in depth, today but one of the problems I
> > saw was the apparent loopholes in the text. No specifics, but I
> > remember thinking "a lawyer would have a field day with this -
> > dozens of ways they could sidestep these issues"
>
> *Pretty* *please* file comments about the apparent loopholes at
> gplv3.fsf.org/comments

To do that I'd have to go back, take the time to re-read the GPLv3 *in* 
*depth*, think about each paragraph of each section individually...

Like I said, I just got a general impression that a lawyer would have a 
field-day with it.

> > What I was getting at, here, is that the GPLv3 isn't backwards
> > compatible with GPLv2,
>
> It couldn't possibly be.  The whole point of upgrading the GPL is such
> that it complies better with its spirit of defending the freedoms, so
> as to keep free software free.  This can only be accomplished with
> additional restrictions that stop practices that deny users'
> freedoms.
>
> Relaxing the provisions, a necessary condition for compatibility,
> wouldn't make for better defenses.
>
> > because you aren't allowed to remove rights from the GPLv3. Remember,
> > there are rights encoded in the GPLv3 that don't appear in v2.
>
> I'm not sure what you mean by "rights" in the two sentences above.
> You know you can grant additional permissions, so I assume that's not
> what you mean, even more so because you *can* indeed take them out.
> Is it "conditions", "restrictions" or some such, that in turn
> translate into freedoms for downstream users, or is it about the
> granted rights per se?

Sorry, bad choice of words. There are "guarantees" encoded into every license. 
There are some encoded into the GPLv3 that aren't encoded into the GPLv2. You 
can't remove or restrict those guarantees without violating the license. And 
removing those guarantees would be the only way to make the GPLv3 fully 
compatible with the GPLv2.

> > In fact, if you want to use GPLv3 code in a GPLv2 project you have
> > to use GPLv3. For some projects, like the Linux Kernel, the upgrade
> > is impossible to accomplish.
>
> Impossible is a bit too strong.  I understand it would take a huge
> amount of work though, so I sympathize with "it wouldn't be worth it",
> even if, in my scale of moral values, I'd disagree.

In this case I wasn't speaking literally. I should have been a lot more 
specific there - it should say "practically impossible". 

DRH

-- 
Dialup is like pissing through a pipette. Slow and excruciatingly painful.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ