linux-kernel - Re: [PATCH] Documentation: clarify driver licensing rules

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <dd23860c-7e45-2d43-0405-c8037f4a7d8f@intel.com>
Date:   Wed, 12 Aug 2020 07:45:00 -0700
From:   Dave Hansen <dave.hansen@...el.com>
To:     Greg KH <gregkh@...uxfoundation.org>
Cc:     linux-kernel@...r.kernel.org, dan.j.williams@...el.com,
        h.peter.anvin@...el.com, tglx@...utronix.de, corbet@....net,
        linux-spdx@...r.kernel.org, linux-doc@...r.kernel.org
Subject: Re: [PATCH] Documentation: clarify driver licensing rules

On 8/12/20 1:23 AM, Greg KH wrote:
> On Tue, Aug 11, 2020 at 10:17:48AM -0700, Dave Hansen wrote:
>> But, this left submitters (and the folks who help them pick licenses)
>> a bit confused. They have read things like
>> Documentation/process/license-rules.rst which says:
>>
>> 	individual source files can have a different license
>> 	which is required to be compatible with the GPL-2.0
>>
>> and Documentation/process/submitting-drivers.rst:
>>
>> 	We don't insist on any kind of exclusive GPL licensing,
>> 	and if you wish ... you may well wish to release under
>> 	multiple licenses.
> 
> Both of these are fine, but maybe you need to put:
> 	"don't try to do stupid things just because you can!"
> somewhere in here instead?

Folks never think what _they_ are doing is stupid, so I fear that would
fall on deaf ears.

...
>>  Licensing:
>> -		The code must be released to us under the
>> -		GNU General Public License. We don't insist on any kind
>> -		of exclusive GPL licensing, and if you wish the driver
>> -		to be useful to other communities such as BSD you may well
>> -		wish to release under multiple licenses.
>> +		The code must be released to us under the GNU General Public
>> +		License. While there are no kernel-wide rules, some maintainers
>> +		may insist on exclusive GPL licensing by default.
> 
> Maintainers should not do that, it is not their place to do so.  They
> _can_ push back on, again, stupid things, but in the end, they should
> accept anything that is a compatible license with the kernel as it is
> really up to the copyright owner as to what license they wish to use.

I wonder if we're not quite on the same page.  I thought the pitfall
recently was from overly-aggressive dual-licensing on code that wasn't
likely to be able to be used in another project.  Was that the misstep?
 Or was it that the code shouldn't have been dual-licensed in the first
place because it was too intertwined with GPLv2 code to be anything but
purely GPLv2?

> So while I like the intent here, I don't think this wording change is
> good as-is.
> 
> As it stands, the text makes sense, but as always, if you have legal
> questions, you should be talking to a lawyer, not a kernel developer :)

I'd like to do two things with this Documentation/.  First, to _get_
folks to go talk to their lawyers.  Second, the lawyers and the
non-lawyers who do licensing _will_ read this documentation.  If they
understand what the kernel expects, they are in the best position to
pass that understanding on to developers since they're the gatekeepers.
  That will hopefully make your job easier because it will filter out
some of the stupid things before you see them.