lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20250627074925.GJ2809@qaa.vinc17.org>
Date: Fri, 27 Jun 2025 09:49:25 +0200
From: Vincent Lefevre <vincent@...c17.net>
To: Alejandro Colomar <alx@...nel.org>
Cc: Jilayne Lovejoy <opensource@...ayne.com>, seabass-labrax@....com,
	Carlos O'Donell <carlos@...hat.com>,
	"Andries E. Brouwer" <aeb@....nl>, linux-man@...r.kernel.org,
	linux-kernel@...r.kernel.org, libc-alpha@...rceware.org
Subject: Re: man-pages-6.14 released

On 2025-06-27 06:23:26 +0200, Alejandro Colomar wrote:
> > I've always heard that a copyright notice was optional and only
> > informative (so, in particular, there are no requirements to have
> > per-file copyright notices instead of a single one for the work).
> 
> I tend to agree with you.  I'll invoke some SPDX people, which might
> clarify our legal doubts.  I suspect they're lawyers or have contact
> with lawyers.
> 
> For context to the SPDX people, we're discussing if the following is
> valid or not:
> 
> There were a lot of old copyright notices, each with its own format,
> some more formal, some less...
> 
> That was a huge mess, and the copyright notices were not always
> respected: for example, in cases code has been moved from one file to
> another, and the copyright notices weren't carried over.  In other
> cases, some people (including myself) significantly modified some files,
> but forgot to add a copyright notice for themselves.
> 
> So, I eventually decided to unify the copyright notices for the entire
> project, so that the copyright notices would look like
> 
> 	Copyright, the authors of the Linux man-pages project
> 
> And then a top-level AUTHORS file would list every author.  This is
> quite more accurate than the previous copyright notices.  However, some
> contributors are concerned that it might be illegal to modify those
> copyright notices without express written permission.
> 
> I've sent email to everyone whose copyright notice has been modified,
> and I got around a third of explicit approvals, but the other two thirds
> remained silent (in some cases, the emails probably don't exist, the
> people are dead, or they don't read the email anymore).  Notably, nobody
> has explicitly said no.
> 
> What do you think?

There is actually a more important issue: it appears that the man
pages are not all distributed under the same license (according to
"SPDX-License-Identifier:"), so that some care would have had do be
done when copying text from one man page to another one. That said,
I would tend to think that when such text has been copied, this was
for related man pages, and there is a chance that such man pages are
distributed under the same license. Unifying the licenses by asking
the authors / copyright holders would be a great thing to do.

Now, about the copyright notices, you also need to give the full
list of the licenses that can apply, as some license may require
the copyright notice to have some restricted form (such as being
included in the file itself).

For instance, the GPL licenses have

  To do so, attach the following notices to the program. It is safest
  to attach them to the start of each source file to most effectively
  convey the exclusion of warranty; and each file should have at least
  the "copyright" line and a pointer to where the full notice is
  found.

(or "state" instead of "convey"), for which this seems clear that
the current decision is OK.

I think that among the licences listes under LICENSES, only
Linux-man-pages-1-para could be problematic, but only 18 files
are concerned.

-- 
Vincent Lefèvre <vincent@...c17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / Pascaline project (LIP, ENS-Lyon)

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ