netdev - Re: [PATCH linux-firmware] linux-firmware: liquidio: fix GPL compliance issue

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Wed, 17 Oct 2018 16:11:50 -0400
From:   "John W. Linville" <linville@...driver.com>
To:     "Manlunas, Felix" <Felix.Manlunas@...ium.com>
Cc:     "linux-firmware@...nel.org" <linux-firmware@...nel.org>,
        "netdev@...r.kernel.org" <netdev@...r.kernel.org>,
        "fweimer@...hat.com" <fweimer@...hat.com>,
        "Awasthi, Manish" <Manish.Awasthi@...ium.com>,
        "Panicker, Manojkumar" <Manojkumar.Panicker@...ium.com>,
        "Masood, Faisal" <Faisal.Masood@...ium.com>,
        "Vatsavayi, Raghu" <Raghu.Vatsavayi@...ium.com>,
        "Chickles, Derek" <Derek.Chickles@...ium.com>,
        "Burla, Satananda" <Satananda.Burla@...ium.com>
Subject: Re: [PATCH linux-firmware] linux-firmware: liquidio: fix GPL
 compliance issue

On Wed, Oct 17, 2018 at 07:34:42PM +0000, Manlunas, Felix wrote:
> On Fri, Sep 28, 2018 at 04:50:51PM -0700, Felix Manlunas wrote:
> > Part of the code inside the lio_vsw_23xx.bin firmware image is under GPL,
> > but the LICENCE.cavium file neglects to indicate that.  However,
> > LICENCE.cavium does correctly specify the license that covers the other
> > Cavium firmware images that do not contain any GPL code.
> > 
> > Fix the GPL compliance issue by adding a new file, LICENCE.cavium_liquidio,
> > which correctly shows the GPL boilerplate.  This new file specifies the
> > licenses for all liquidio firmware, including the ones that do not have
> > GPL code.
> > 
> > Change the liquidio section of WHENCE to point to LICENCE.cavium_liquidio.
> > 
> > Reported-by: Florian Weimer <fweimer@...hat.com>
> > Signed-off-by: Manish Awasthi <manish.awasthi@...ium.com>
> > Signed-off-by: Manoj Panicker <manojkumar.panicker@...ium.com>
> > Signed-off-by: Faisal Masood <faisal.masood@...ium.com>
> > Signed-off-by: Felix Manlunas <felix.manlunas@...ium.com>
> > ---
> >  LICENCE.cavium_liquidio | 429 ++++++++++++++++++++++++++++++++++++++++++++++++
> >  WHENCE                  |   2 +-
> >  2 files changed, 430 insertions(+), 1 deletion(-)
> >  create mode 100644 LICENCE.cavium_liquidio
> 
> Hello Maintainers of linux-firmware.git,
> 
> Any feedback about this patch?

I would prefer to see an offer that included a defined URL for anyone
to download the source for the kernel in question without having to
announce themselves. The "send an email to info@...ium.com" offer may
(or may not) be sufficient for the letter of the law. But it seems
both fragile and prone to subjective frustrations and delays for
users to obtain the sources at some future date.

Respectfully,

John
-- 
John W. Linville		Someday the world will need a hero, and you
linville@...driver.com			might be all we have.  Be ready.