lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite for Android: free password hash cracker in your pocket
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date:	Tue, 18 Nov 2008 18:28:31 -0500
From:	Theodore Tso <tytso@....edu>
To:	Fredrik Markström 
	<fredrik.markstrom@...lonenterprise.com>
Cc:	Alan Cox <alan@...rguk.ukuu.org.uk>, Valdis.Kletnieks@...edu,
	linux-kernel@...r.kernel.org
Subject: Re: Developing non-commercial drivers ?

On Tue, Nov 18, 2008 at 10:13:30PM +0100, Fredrik Markström wrote:
> 
> Unfortunately I can't disclose our client simply because I have not
> asked for their permission.

Understood, of course not.  All you can do is suggest that they might
want to contact us.

> Anyway strongly doubt they want to do something illegal or wrong, but
> a lot of people obviously thinks binary drivers are accepted by the
> Linux community and licensing. It sure would be nice if this could be
> stated more explicit in some official FAQ.

There are many different ways to use the word "wrong".  There is
"morally wrong" (as in, goes against the spirit of the license and of
the development community).  There is "legally wrong", which depends
on the legal jurisdiction (of you, the company, and the end user),
which will require a lawyer's input.  And then there's "pragamatically
wrong", as in, regardless of whether it's legal, there are significant
technical downsides in trying to trying to develop binary-only drivers
that in the long run will cost you money.

> Your (the Linux Foundations) web gives the impression that you protect
> Linux against external interests (like my clients),  but do you have
> to authority to work the other way ? Can you make deals or promises on
> behalf of the copyright owners of the Linux kernel ? I doubt that but
> might be wrong.

No, of course not.  That being said, there are binary modules out
there, and there are ways which are "safer" in terms of whether you
are likely to get sued, if the company you are working with wants to
skate close to the dark side and live in the same legal grey zone as
Nvidia and Broadcom.

> Anyway, I'm not sure how the Linux Foundation can help in this case,
> if you can explain that, I sure will bring it up with our client.

We can give advice; but it's well informed advice.

						- Ted
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ