lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <MDEHLPKNGKAHNMBLJOLKMEDKGJAC.davids@webmaster.com>
Date:	Mon, 3 Sep 2007 02:47:59 -0700
From:	"David Schwartz" <davids@...master.com>
To:	<dhazelton@...er.net>
Cc:	<espie@...im.net>, <linux-kernel@...r.kernel.org>
Subject: RE: GPL weasels and the atheros stink

Daniel Hazelton wrote:

> > Your entire argument is based on the false assumption that
> > these licenses
> > are compatible. They are not. You cannot put code that was offered under
> > the GPLv2 into code that is licensed under the dual license and
> > distribute
> > the result.

> Then go yell at Mr. Floeter. The code is dual-licensed and he put
> BSD-License
> only code in it. Because that's the *EXACT* *SAME* thing you're talking
> about.

This is a completely irrelevent reply. For one thing, I'm not yelling at
anyone, so I don't see why you think I'm being inconsistent or something
because I'm not yelling at Mr. Floeter.

Actually, it's perfectly fine to put BSD-only code in a dual-licensed file.
You just need to remove the dual license and make the file GPL-only.

> IANAL, but your argument is specious - if the code is
> dual-licensed and you
> are going to let one person add code to it that is only licensed
> under one of
> those licenses, you *CANNOT* complain when somebody else does it
> and chooses
> the other license. (Well, you can, but the complaint has no legal
> standing)

What argument am I making that's specious? Perhaps you have me confused with
someone else?

In any event, I utterly reject the argument that you make. Any argument "you
cannot complain about X unless you also complain about Y" is just totally
bogus. You can say "you cannot complain about X and *defend* Y because X and
Y are similar". But the fact that I don't complain about something creates
no inconsistency. I am under no obligation to complain about everything that
contradicts my principles, even things I don't know about or don't have
enough information to give an informed opinion.

> > That's not the problem. The problem is that if the file stays
> > dual-licensed, everyone working on that file in the Linux
> > kernel will have
> > to be careful not to put any GPLv2-only code into it. That's just
> > untenable. Any consistent license is better than different files being
> > under different licenses such that you can't cut and paste code between
> > files.

> Then why aren't you complaining about Mr. Floeters code ?

Because I am too busy answering nonsensical arguments like yours. I am under
no obligation to complain about everything I might disagree with if I were
informed about it. Why aren't you complaining about starving kids in Africa?

> His code doesn't maintain the dual-license. I think the reason is
> that you
> could care less about the "Dual License" and you just want the
> code - period.

You are probably confusing me with someone else. I honestly can't see how
your reply in any way fits with what I'm saying.

> > If you embed protectable elements from GPLv2-only code into any of those
> > files, they are no longer dual-licensed. You wind up creating traps and
> > complexity that makes the code much harder to maintain.

> The same can be said of Floeters code. *ALL* of his code, IIRC, is
> *SINGLE-LICENSE*. ie: a complexity trap. But you aren't
> complaining about his
> code - you are complaining that somebody is doing the same thing, but is
> using the side of the dual-license you don't like.
>
> Nothing *LEGALLY* actionable there.

What the hell are you on about? Whether I think Floeters is the Earthly
embodiment of Satan or the my very best friend has no impact whatsoever on
the argument I'm making which has nothing whatsoever to do with Floeters.

You are accusing me of being inconsitent about an issue where I've made no
comment whatsoever about that issue.

> > A dual-license is a compromise. One of the downsides is that
> > you may force
> > large projects that are under one license or the other to fork
> > the code. If
> > that bothers you, don't dual license.

> Exactly.

> This means that I can contribute as much code as I want to a
> project under
> whatever license I choose, but the project itself can have a different
> license. In the case of the code in question, that means that the
> second Mr.
> Floeters code was distributed as a part of the "whole work" that
> constitutes
> the Atheros driver it automatically fell under the dual-license of the
> controlling project.

Umm, I'm not sure I know what you're talking about, but if I understand you
correctly, what you are saying is legally impossible. Only the author can
set the available licensing choices for his code. Distribution cannot create
new rights.

> When Jiri downloaded the code and began the work of
> porting it to Linux, he accepted the terms of the GPL license -
> his choice to
> make. However, the initial patches altered the licensing of files that,
> individually, have a different license. That was illegal and
> pointed out to
> him - and that code *WAS* *NOT* accepted into Linux.

I think you have a few confusions all mixed together here. First, no license
is needed to download or use code. You don't have to accept the GPL license
or the BSD license. If the original author placed the code under a
dual-license, then you receive the dual-license from the original author.
Distributors cannot affect the grant of license from author to recipient.
(Neither the GPL nor the BSD license grant distributors the right to
relicense the original code. Such an agreement would have to be in writing
anyway.)

Now, when he distributed his modified works, he needed the right to do so.
He could have obtained that right from either the GPL or the BSD, if the
code was dual-licensed by the original author. He can choose one license
and, because both licenses permit removing other licenses, he could remove
the other one.

If that's what he did, no harm, no foul.

> STFU, OK ? -- Your position isn't legally tenable *AT* *ALL*.
> (Okay, so it might be that any Atheros driver containing Jiri's
> changes loses
> the dual-license because of the viral nature of the GPL... IANAL,
> but I can't
> see that happening in this case.)

If someone makes changes to a dual-licensed file, they can distribute their
changes under *either* the BSD license, the GPL license, or some other
license. The original file is still under both licenses, but their modified
file can be under neither. The BSD license does not require you to
re-license your changes under a compatible license, and a dual-license
permits modifiers and redistributors to get the rights they need under
either license.

DS


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ