linux-kernel - Re: Dual-Licensing Linux Kernel with GPL V2 and GPL V3

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <Pine.LNX.4.64.0706201200550.30395@asgard.lang.hm>
Date:	Wed, 20 Jun 2007 12:06:42 -0700 (PDT)
From:	david@...g.hm
To:	"H. Peter Anvin" <hpa@...or.com>
cc:	Michael Poole <mdpoole@...ilus.org>,
	Tomas Neme <lacrymology@...il.com>,
	"Linux-Kernel@...r. Kernel. Org" <linux-kernel@...r.kernel.org>
Subject: Re: Dual-Licensing Linux Kernel with GPL V2 and GPL V3

On Wed, 20 Jun 2007, H. Peter Anvin wrote:

> Michael Poole wrote:
>> Tomas Neme writes:
>>
>>> I have been following this discussion for the last week or so, and
>>> what I haven't been able to figure out is what the hell is the big
>>> deal with TiVO doing whatever they want to with their stupid design.
>>> They made a design, they build a machine, they sell it as is, and
>>> provide source code for GPL'ed software... what's your problem?
>>
>> It's simple: they don't provide _complete_ source code.  They keep the
>> source code for the part of their Linux kernel images that provides
>> the functionality "runs on Tivo DVRs".  The GPL requires that
>> distributors of binary versions provide complete source code, not just
>> the parts of source code that are convenient.
>>
>
> If true, that's a clear violation of the GPLv2, but it's very different
> from preventing the loading of modified images on their hardware (which
> appears to be permitted by v2.)
>
> 	-hpa

this is very much NOT true. if you take the source the provide you can 
compile a kernel that will run on the tivo, the only thing you have to do 
(on some models) is to change the bios to skip the step that checks if the 
kernel has been tampered with.

in fact, people have ported the nessary changes all the way up to the 2.6 
kernels (the tivos run a 2.1 derived kernel). you can buy hard drives to 
plug into your tivo with newer kernels (and yes, you do get source from 
those folks as well)

by the way, the first hacks that disabled these checks were done by people 
who were interested in getting their tivo to boot faster (they found an 
expensive bios routing that wasn't nessasary to boot), they weren't 
interested in loading different software on the box. when they released 
the hack other people realized that they had opened the door for other 
changes.

David Lang
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/