linux-kernel - Re: Dual-Licensing Linux Kernel with GPL V2 and GPL V3

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <46799EEF.7030403@iders.ca>
Date:	Wed, 20 Jun 2007 16:41:03 -0500
From:	Andrew McKay <amckay@...rs.ca>
To:	Alexandre Oliva <aoliva@...hat.com>
CC:	Alan Cox <alan@...rguk.ukuu.org.uk>,
	Linus Torvalds <torvalds@...ux-foundation.org>,
	Al Viro <viro@....linux.org.uk>,
	Bernd Schmidt <bernds_cb1@...nline.de>,
	Ingo Molnar <mingo@...e.hu>,
	Daniel Hazelton <dhazelton@...er.net>,
	Greg KH <greg@...ah.com>,
	debian developer <debiandev@...il.com>, david@...g.hm,
	Tarkan Erimer <tarkan@...one.net.tr>,
	linux-kernel@...r.kernel.org,
	Andrew Morton <akpm@...ux-foundation.org>
Subject: Re: Dual-Licensing Linux Kernel with GPL V2 and GPL V3

Alexandre Oliva wrote:
> On Jun 20, 2007, Andrew McKay <amckay@...rs.ca> wrote:
> 
>> However, I don't see how this would ever require a company like Tivo
>> or Mastercard to have their networks play nice with a unit that has
>> been modified by the end user, potentially opening up some serious
>> security holes.
> 
> Which is why the GPLv3 doesn't make the requirement that you stated.
> 

So if it's not a requirement of the GPLv3, then Tivo could deny content based 
signing the binary image of the Linux kernel and using that signature as 
authentication on their network (or their content providers network).  A 
modified Tivo box would not be able to preform it's original task of being a PVR 
at that point, at least with the content provider's signal.  Seems pretty 
pointless to me.  Seems like almost the same thing as not allowing an unsigned 
Linux kernel to boot on the system.  Though it would still be possible to get 
the Tivo box to play tetris or something like that.

Andrew McKay

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/