linux-kernel - Re: [PATCH V2] license-rules.rst and LICENSES: Use only spdx version 3 with -only and -or-later

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:   Wed, 22 Aug 2018 13:22:54 -0700
From:   Joe Perches <joe@...ches.com>
To:     Matthew Wilcox <willy@...radead.org>
Cc:     Thomas Gleixner <tglx@...utronix.de>,
        Linus Torvalds <torvalds@...ux-foundation.org>,
        Linux Kernel Mailing List <linux-kernel@...r.kernel.org>,
        Kate Stewart <kstewart@...uxfoundation.org>,
        Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
        Christoph Hellwig <hch@....de>,
        Russell King <rmk+kernel@...linux.org.uk>,
        Rob Herring <rob.herring@...aro.org>,
        Jonas Oberg <jonas@...e.org>,
        Andrew Morton <akpm@...uxfoundation.org>,
        Jonathan Corbet <corbet@....net>,
        "open list:DOCUMENTATION" <linux-doc@...r.kernel.org>
Subject: Re: [PATCH V2] license-rules.rst and LICENSES: Use only spdx
 version 3 with -only and -or-later

On Wed, 2018-08-22 at 13:12 -0700, Matthew Wilcox wrote:
> On Wed, Aug 22, 2018 at 12:47:57PM -0700, Joe Perches wrote:
> > Perhaps it's better to stick to a single SPDX version style for
> > all kernel files.
> > 
> > Right now, there are already several -only and -or-later uses.
> > 
> > $ git grep -P 'SPDX-License-Identifier.*(?:-or-later|-only)'| wc -l
> > 144
> > 
> > So perhaps a patch and a tool to do the reverse conversion:
> 
> No.  Any tool which does anything useful just has to understand both
> 2.0 and 3.0 naming.  They're aliases for each other, that's all.

But that same tool would have to be updated if ever
yet-another spdx version appears.

So it'd probably be better to support just 1 version.