lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date:	Thu, 21 Jun 2007 20:23:57 -0300
From:	Alexandre Oliva <aoliva@...hat.com>
To:	davids@...master.com
Cc:	<linux-kernel@...r.kernel.org>
Subject: Re: how about mutual compatibility between Linux's GPLv2 and GPLv3?

On Jun 21, 2007, "David Schwartz" <davids@...master.com> wrote:

>> > Wouldn't that defeat the entire purpose of the GPLv3? Couldn't
>> > I take any
>> > GPLv3 program, combine it with a few lines of Linux code, and
>> > Tivoize the
>> > result?

>> No.  This is not permission to relicense.  This is permission to
>> combine.  Each author still gets to enforce the terms of her own code.

> This makes no sense. We are not talking mere aggregation here, we are
> talking developmental convergence. If I wrote some code that was in the
> Linux kernel, how can I enforce the terms of my code (guaranteed write to
> Tivoize) in the derivative work that it becomes mixed with?

In just the same way you'd enforce it today: with help from a lawyer
who understands these issues that you clearly don't understand.

>> So a tivoizer would have to take out the code licensed under the
>> GPLv3, and use only the code that permits tivoization.  Same as today,
>> but without the possibility of cooperation for licensees who don't
>> tivoize.

> I am baffled how this could possibly work. You understand that the GPLv2
> specifically guarantees that any derivative work will be Tivoizable and the
> people who chose the GPLv2 specifically want it that way?

Yes.  And the GPLv2 code would remain that way.

If GPLv3 had this provision I suggested, and you wanted to cooperate
with some other project that offered GPLv3 drivers, then you could use
them by adding the mutual-cooperation provision I suggested.

Of course you're free to not want to cooperate with anyone else who
doesn't share your opinion.  That's your call.

> If I chose the GPLv2 over the GPLv3 as a conscious choice, that means I want
> people to be able to Tivoize any derivative work made from my work that is
> distributed.

This provision was not intended to prevent anyone from tivoizing your
work or derived works thereof.  It was only intended to enable you to
use code from GPLv3 projects as long as these GPLv3 projects could
also use your code.  Mutual cooperation, as opposed to no cooperation
whatsoever.

I *think* lawyers would probably recommend you to keep code under
different licenses in separate files, like you already do with code
licensed under GPLv2-compatible licenses.

I *think* that, with this pair of mutual cooperation provisions, you
could even use code licensed under the Apache 2.0 license.  And
OpenSolaris drivers, if it's licensed under GPLv3.

And you wouldn't be departing from your intent to enable people to
tivoize your code, which you currently choose not to enforce even
though GPLv2 might very well enable you to; you could keep on
cooperating with people who understand GPLv2 doesn't permit
tivoization, and you'd be able to establish mutual cooperation with
people who choose a license that makes this point clear.

It's not like anyone can safely tivoize devices with GPLv2 already, so
refusing to cooperate with GPLv3 on these grounds buys you nothing.
It is only a public statement of refusal to cooperate, with you are
entitled to make, even if it comes off as silly because you chose a
license that already contains the provisions for "complete
corresponding source code" and "no further restrictions on the
exercise of the rights granted by the license" that tivoizers fail to
comply with.

At which point one gets to wonder why you chose this license in the
first place, if it doesn't give you what you want.

FWIW, all of my (very few) contributions to Linux were made with the
intent of not permitting tivoization or any form of restricting users
freedoms.  I guess this means, from now on, you'd stop accepting my
contributions and take out whatever contributions I've made, since
otherwise I'd be able to enforce them against tivoizers.  And what's
more, I could still use your code in my GPLv2 projects, and enforce
that against tivoizers, and there's nothing you can do to stop me.

So what exactly are you trying to accomplish by pretending that mutual
compatibility with GPLv3 would set you back in any way?

-- 
Alexandre Oliva         http://www.lsd.ic.unicamp.br/~oliva/
FSF Latin America Board Member         http://www.fsfla.org/
Red Hat Compiler Engineer   aoliva@...dhat.com, gcc.gnu.org}
Free Software Evangelist  oliva@...d.ic.unicamp.br, gnu.org}
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ