linux-kernel - Re: [PATCH] modsign: Fix GPL/OpenSSL licence incompatibility

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20151004194737.GC27633@xo-6d-61-c0.localdomain>
Date:	Sun, 4 Oct 2015 21:47:37 +0200
From:	Pavel Machek <pavel@....cz>
To:	David Howells <dhowells@...hat.com>
Cc:	torvalds@...ux-foundation.org, jmorris@...ei.org,
	David Woodhouse <David.Woodhouse@...el.com>,
	Julian Andres Klode <jak@...-linux.org>,
	linux-kernel@...r.kernel.org,
	linux-security-module@...r.kernel.org, keyrings@...r.kernel.org,
	linux-crypto@...r.kernel.org
Subject: Re: [PATCH] modsign: Fix GPL/OpenSSL licence incompatibility

On Tue 2015-09-15 16:03:36, David Howells wrote:
> From: David Woodhouse <dwmw2@...radead.org>
> 
> The GPL does not permit us to link against the OpenSSL library. Use
> LGPL for sign-file and extract-file instead.

Actually GPL does permit you to link to "system libraries", and it looks like 
OpenSSL is pretty much system library these days.

(But no problem with LGPL).


> 
> Reported-by: Julian Andres Klode <jak@...-linux.org>
> Signed-off-by: David Woodhouse <David.Woodhouse@...el.com>
> Signed-off-by: David Howells <dhowells@...hat.com>
> Reviewed-by: Julian Andres Klode <jak@...-linux.org>
> ---
> 
>  scripts/extract-cert.c |   10 +++++-----
>  scripts/sign-file.c    |   13 ++++++++-----
>  2 files changed, 13 insertions(+), 10 deletions(-)
> 
> diff --git a/scripts/extract-cert.c b/scripts/extract-cert.c
> index 10d23ca9f617..6ce5945a0b89 100644
> --- a/scripts/extract-cert.c
> +++ b/scripts/extract-cert.c
> @@ -1,15 +1,15 @@
>  /* Extract X.509 certificate in DER form from PKCS#11 or PEM.
>   *
> - * Copyright © 2014 Red Hat, Inc. All Rights Reserved.
> - * Copyright © 2015 Intel Corporation.
> + * Copyright © 2014-2015 Red Hat, Inc. All Rights Reserved.
> + * Copyright © 2015      Intel Corporation.
>   *
>   * Authors: David Howells <dhowells@...hat.com>
>   *          David Woodhouse <dwmw2@...radead.org>
>   *
>   * This program is free software; you can redistribute it and/or
> - * modify it under the terms of the GNU General Public Licence
> - * as published by the Free Software Foundation; either version
> - * 2 of the Licence, or (at your option) any later version.
> + * modify it under the terms of the GNU Lesser General Public License
> + * as published by the Free Software Foundation; either version 2.1
> + * of the licence, or (at your option) any later version.
>   */
>  #define _GNU_SOURCE
>  #include <stdio.h>
> diff --git a/scripts/sign-file.c b/scripts/sign-file.c
> index 058bba3103e2..c3899ca4811c 100755
> --- a/scripts/sign-file.c
> +++ b/scripts/sign-file.c
> @@ -1,12 +1,15 @@
>  /* Sign a module file using the given key.
>   *
> - * Copyright (C) 2014 Red Hat, Inc. All Rights Reserved.
> - * Written by David Howells (dhowells@...hat.com)
> + * Copyright © 2014-2015 Red Hat, Inc. All Rights Reserved.
> + * Copyright © 2015      Intel Corporation.
> + *
> + * Authors: David Howells <dhowells@...hat.com>
> + *          David Woodhouse <dwmw2@...radead.org>
>   *
>   * This program is free software; you can redistribute it and/or
> - * modify it under the terms of the GNU General Public Licence
> - * as published by the Free Software Foundation; either version
> - * 2 of the Licence, or (at your option) any later version.
> + * modify it under the terms of the GNU Lesser General Public License
> + * as published by the Free Software Foundation; either version 2.1
> + * of the licence, or (at your option) any later version.
>   */
>  #define _GNU_SOURCE
>  #include <stdio.h>
> 
> --
> To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
> the body of a message to majordomo@...r.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
> Please read the FAQ at  http://www.tux.org/lkml/

-- 
(english) http://www.livejournal.com/~pavelmachek
(cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/