From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 1C87E138334 for ; Thu, 26 Dec 2019 23:53:52 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 5BC82E0ABE; Thu, 26 Dec 2019 23:53:51 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 29B6DE0ABE for ; Thu, 26 Dec 2019 23:53:51 +0000 (UTC) Received: from oystercatcher.gentoo.org (unknown [IPv6:2a01:4f8:202:4333:225:90ff:fed9:fc84]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id DDCB634DBE0 for ; Thu, 26 Dec 2019 23:53:49 +0000 (UTC) Received: from localhost.localdomain (localhost [IPv6:::1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id 998A035 for ; Thu, 26 Dec 2019 23:53:48 +0000 (UTC) From: "Göktürk Yüksek" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Göktürk Yüksek" Message-ID: <1577404342.be80788debfcc0035e9d014956763871fd5df287.gokturk@gentoo> Subject: [gentoo-commits] proj/devmanual:master commit in: general-concepts/licenses/ X-VCS-Repository: proj/devmanual X-VCS-Files: general-concepts/licenses/text.xml X-VCS-Directories: general-concepts/licenses/ X-VCS-Committer: gokturk X-VCS-Committer-Name: Göktürk Yüksek X-VCS-Revision: be80788debfcc0035e9d014956763871fd5df287 X-VCS-Branch: master Date: Thu, 26 Dec 2019 23:53:48 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply X-Archives-Salt: 9343e540-7b66-4401-94a3-85f004c1c94d X-Archives-Hash: 9a02c2ddadd64729ab950c1fa9455af0 commit: be80788debfcc0035e9d014956763871fd5df287 Author: Michał Górny gentoo org> AuthorDate: Mon Sep 9 08:52:47 2019 +0000 Commit: Göktürk Yüksek gentoo org> CommitDate: Thu Dec 26 23:52:22 2019 +0000 URL: https://gitweb.gentoo.org/proj/devmanual.git/commit/?id=be80788d general-concepts/licenses: Add a section on upstream license problems (The submission is subjected to further editing by the committer) Closes: https://github.com/gentoo/devmanual/pull/109 Acked-by: Ulrich Müller gentoo.org> Signed-off-by: Michał Górny gentoo.org> Signed-off-by: Göktürk Yüksek gentoo.org> general-concepts/licenses/text.xml | 61 ++++++++++++++++++++++++++++++++++---- 1 file changed, 56 insertions(+), 5 deletions(-) diff --git a/general-concepts/licenses/text.xml b/general-concepts/licenses/text.xml index d37456c..94ad420 100644 --- a/general-concepts/licenses/text.xml +++ b/general-concepts/licenses/text.xml @@ -127,14 +127,65 @@ ought to have all-rights-reserved license, and RESTRICT="bindist mirror".

+ + + +
+Detecting upstream license problems + +

-Please watch for license conflicts. If the license indicated -by the package is incompatible with the licenses used by its sources -(e.g. BSD/MIT package including GPL sources), please contact -the licenses team for guidance. Do not add packages that seem -to include license term violations. +Please watch out for upstream licensing problems and report them +upstream. +You may ask the Gentoo licenses team for guidance. In general, it is +preferable to wait for upstream to resolve the issue and release a new +version. Do not add packages that seem to include license term +violations!

+

+Common license problems include but are not limited to: +

+ +
    +
  1. +

    + Including third party code without appropriate copyright notices. + Practically all licenses (with notable exception of public + domain-alike) require attribution, and some require copying + original copyright notices verbatim. +

    +
    2. +
  2. +

    + Combining incompatible licenses. When you are combining multiple + files using different licenses into a single executable, those + licenses need to be compatible. For example, it is not possible + to combine proprietary code with copyleft licenses (e.g. GPL). + It is also incorrect to combine GPL-2 (only) and GPL-3 code. +

    +
    3. +
  3. +

    + Dynamically linking incompatible executables. Arguably, some + licenses also apply restriction on dynamic linking between + executables and shared libraries. For example, normally you can't + link GPL executables with OpenSSL. The same restriction does not + apply to LGPL, and some projects are adding specific linking + exceptions to their GPL usage. +

    +
    4. +
  4. +

    + Wrong or incomplete license information about a project. Upstream + may indicate the wrong effective license for a project (e.g. + in README. For example, upstream may indicate that the project + is licensed as GPL-2+ while some of the source code files use + GPL-3+ license. +

    +
    5. +
+