linux-kernel - Re: REUSE/SPDX: Invalid LicenseRef in Linux sources

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Fri, 9 Aug 2019 11:43:03 +0200
From:   Greg Kroah-Hartman <gregkh@...uxfoundation.org>
To:     Charlemagne Lasse <charlemagnelasse@...il.com>
Cc:     LKML <linux-kernel@...r.kernel.org>,
        Thomas Gleixner <tglx@...utronix.de>,
        Basil Peace <grv87@...dex.ru>,
        Carmen Bianca Bakker <carmen@...menbianca.eu>,
        Keith Maxwell <keith.maxwell@...il.com>,
        Matija Šuklje <matija.suklje@...eray.com>
Subject: Re: REUSE/SPDX: Invalid LicenseRef in Linux sources

On Fri, Aug 09, 2019 at 11:30:44AM +0200, Charlemagne Lasse wrote:
> When I run the reuse lint tool on the current linux sources, I get
> following error
> 
> reuse.project - WARNING - Could not resolve SPDX identifier of
> LICENSES/deprecated/GPL-1.0, resolving to LicenseRef-Unknown0
> reuse.project - WARNING - Could not resolve SPDX identifier of
> LICENSES/exceptions/GCC-exception-2.0, resolving to
> LicenseRef-Unknown1
> reuse.project - WARNING - Could not resolve SPDX identifier of
> LICENSES/preferred/LGPL-2.0, resolving to LicenseRef-Unknown2
> reuse.project - WARNING - Could not resolve SPDX identifier of
> LICENSES/preferred/LGPL-2.1, resolving to LicenseRef-Unknown3
> reuse.project - WARNING - Could not resolve SPDX identifier of
> LICENSES/preferred/GPL-2.0, resolving to LicenseRef-Unknown4
> reuse.project - WARNING - Could not resolve SPDX identifier of
> LICENSES/dual/Apache-2.0, resolving to LicenseRef-Unknown5
> reuse.project - WARNING - Could not resolve SPDX identifier of
> LICENSES/dual/MPL-1.1, resolving to LicenseRef-Unknown6
> reuse.project - WARNING - Could not resolve SPDX identifier of
> LICENSES/dual/CDDL-1.0, resolving to LicenseRef-Unknown7
> 
> Can you please help to fix the problem

Please fix the reuse tool, I don't see this being a kernel issue, it has
never said it follows the spec put forth by the reuse project.

thanks,

greg k-h