linux-kernel - RE: [PATCH v9 1/6] LICENSES: Add the copyleft-next-0.3.1 license

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <BN7PR13MB2499BA2AFAC1C79197734D81FDD69@BN7PR13MB2499.namprd13.prod.outlook.com>
Date:   Wed, 25 May 2022 19:05:31 +0000
From:   "Bird, Tim" <Tim.Bird@...y.com>
To:     Luis Chamberlain <mcgrof@...nel.org>
CC:     Thomas Gleixner <tglx@...utronix.de>,
        Richard Fontana <fontana@...rpeleven.org>,
        "tj@...nel.org" <tj@...nel.org>,
        "gregkh@...uxfoundation.org" <gregkh@...uxfoundation.org>,
        "akpm@...ux-foundation.org" <akpm@...ux-foundation.org>,
        "jeyu@...nel.org" <jeyu@...nel.org>,
        "shuah@...nel.org" <shuah@...nel.org>,
        "bvanassche@....org" <bvanassche@....org>,
        "dan.j.williams@...el.com" <dan.j.williams@...el.com>,
        "joe@...ches.com" <joe@...ches.com>,
        "keescook@...omium.org" <keescook@...omium.org>,
        "rostedt@...dmis.org" <rostedt@...dmis.org>,
        "minchan@...nel.org" <minchan@...nel.org>,
        "linux-spdx@...r.kernel.org" <linux-spdx@...r.kernel.org>,
        "linux-doc@...r.kernel.org" <linux-doc@...r.kernel.org>,
        "linux-block@...r.kernel.org" <linux-block@...r.kernel.org>,
        "linux-fsdevel@...r.kernel.org" <linux-fsdevel@...r.kernel.org>,
        "linux-kselftest@...r.kernel.org" <linux-kselftest@...r.kernel.org>,
        "linux-kernel@...r.kernel.org" <linux-kernel@...r.kernel.org>,
        Goldwyn Rodrigues <rgoldwyn@...e.com>,
        Kuno Woudt <kuno@...b.nl>,
        "copyleft-next@...ts.fedorahosted.org" 
        <copyleft-next@...ts.fedorahosted.org>,
        Ciaran Farrell <Ciaran.Farrell@...e.com>,
        Christopher De Nicolo <Christopher.DeNicolo@...e.com>,
        Christoph Hellwig <hch@....de>,
        Jonathan Corbet <corbet@....net>,
        Thorsten Leemhuis <linux@...mhuis.info>
Subject: RE: [PATCH v9 1/6] LICENSES: Add the copyleft-next-0.3.1 license

> -----Original Message-----
> From: Luis Chamberlain <mcgrof@...radead.org> On Behalf Of Luis Chamberlain
> 
> On Wed, May 25, 2022 at 05:05:54PM +0000, Bird, Tim wrote:
> > I know it's being submitted as an OR, but I question
> > the value of introducing another license into the kernel's licensing mix.
> 
> As a free software hacker *I* value the evolution of copyleft and copyleft-next
> does just that. Some may have thought that it may not have been possible to
> evolve copyleft and work with an evolved license on Linux, but copyleft-next
> shows it is possible. Here in lies the value I see in it.
> 
> I agree that we want to keep the number of licenses as small as
> possible but we cannot really dictate which dual licensing options a
> submitter selects unless the license is GPL-2.0-only incompatible,
> which copyleft-next is not.

Um, yes we can dictate that.  There were good reasons that the original
BSD dual-licenses were allowed.  Those same reasons don't apply here.
Each license added to the kernel (even when added as an OR), requires
additional legal analysis.  Corporate lawyers don't usually rely on the
interpretation of novel licenses from external sources.  They do it themselves.
This means that hundreds of lawyers may find themselves reading and
trying to interpret the copyleft-next license.

And here's the thing.
The copyleft-next license has a number of legal issues that make it problematic.
Not the least of which are that some of its terms are dependent on external
situations that can change over time, in a matter that is uncontrolled by either
the licensor or the licensee.  In order to determine what terms are effective, you
have to know when the license was granted, and what the FSF and OSI approved
licenses were at various points in time.  You literally have to use the Internet
Archive wayback machine, and do a bunch of research, to interpret the license terms.
It is not, as currently constructed, a good license, due to this lack of legal clarity.

Regards,
 -- Tim