linux-kernel - Re: SPDX: Appletalk FW license in the kernel

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:   Tue, 26 Sep 2023 09:45:54 -0600
From:   J Lovejoy <opensource@...ayne.com>
To:     Christoph Hellwig <hch@...radead.org>,
        Prarit Bhargava <prarit@...hat.com>
Cc:     Dave Miller <davem@...hat.com>,
        Vitaly Kuznetsov <vkuznets@...hat.com>, jschlst@...ba.org,
        linux-kernel <linux-kernel@...r.kernel.org>,
        linux-spdx@...r.kernel.org
Subject: Re: SPDX: Appletalk FW license in the kernel

On 9/26/23 1:34 AM, Christoph Hellwig wrote:
> On Fri, Sep 15, 2023 at 09:39:05AM -0400, Prarit Bhargava wrote:
>>
>> Is there anyone you know of that we could approach to determine a proper
>> SPDX License for these files?
Answering this question generally, even though it sounds like it wasn't 
needed for this particular situation:

YES! If you find a license in the kernel that does not match a license 
already on the SPDX License List and want to submit the license for 
inclusion on the SPDX License List (which, if accepted, means the 
license will get an SPDX id assigned), please follow this process: 
https://github.com/spdx/license-list-XML/blob/main/DOCS/request-new-license.md

By the way, people on the linux-spdx list may be interested to know that 
Fedora has adopted the use of SPDX license ids in the license field of 
Fedora package metadata. There has been close collaboration between the 
two projects, which has resulted in 95 licenses or exceptions added to 
the SPDX License List so far. I think this is a great thing (even if a 
lot of work) as it is making the SPDX License List more reflective of 
the reality of open source software licensing (including all the 
variations on old permissive licenses).

Jilayne