From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 8A1B0138334 for ; Sun, 26 Aug 2018 11:16:05 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 8DA1BE0871; Sun, 26 Aug 2018 11:16:02 +0000 (UTC) Received: from smtp.gentoo.org (dev.gentoo.org [IPv6:2001:470:ea4a:1:5054:ff:fec7:86e4]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 34A31E07D8 for ; Sun, 26 Aug 2018 11:16:02 +0000 (UTC) Received: from pomiot (d202-252.icpnet.pl [109.173.202.252]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: mgorny) by smtp.gentoo.org (Postfix) with ESMTPSA id 32224335CA3; Sun, 26 Aug 2018 11:16:00 +0000 (UTC) Message-ID: <1535282155.1066.27.camel@gentoo.org> Subject: Re: [gentoo-dev] [RFC] Solving the problem of huge number of wrong LICENSES=*GPL-[23] From: =?UTF-8?Q?Micha=C5=82_G=C3=B3rny?= To: gentoo-dev@lists.gentoo.org Date: Sun, 26 Aug 2018 13:15:55 +0200 In-Reply-To: <5bf34233-8740-44e2-e4d5-2f647a703584@gentoo.org> References: <1535279962.1066.24.camel@gentoo.org> <1535280838.4490.16.camel@gentoo.org> <5bf34233-8740-44e2-e4d5-2f647a703584@gentoo.org> Organization: Gentoo Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="=-NmWD22Bug1sHWKjw/M90" X-Mailer: Evolution 3.24.6 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org Mime-Version: 1.0 X-Archives-Salt: c837b8d4-f36b-4df3-8b82-f04b37413dce X-Archives-Hash: 24ba6ae78600f6497d071aa012bc1e23 --=-NmWD22Bug1sHWKjw/M90 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Sun, 2018-08-26 at 13:09 +0200, Pawe=C5=82 Hajdan, Jr. wrote: > On 26/08/2018 12:53, Mart Raudsepp wrote: > > The common issue here is that upstream COPYING files really do only > > talk about one of the versions. And then you get to validate or source > > files to be sure that they do have a "or later" clause in them. And > > then on each bump you ideally should validate it again, etc, that no > > sources without "or later" allowance are in there... >=20 > Yup, precise tracking of license metadata can be a pain. >=20 > I'm not really sure if that level of it is worth for us as a distro. For > _importing_ other project's source code directly into one's project > precise license compatibility matters a lot. That's not the scenario > we're in. I see LICENSES as mostly a mechanism for end users to accept > or reject EULAs etc, and I'm curious what are other common scenarios. >=20 > Micha=C5=82, could you elaborate on why not distinguishing more precisely > between these GPL variants in LICENSES is a _problem_ ? I can certainly > see the information is not always accurate, but it's not obvious to me > how severe is the downside, what are the consequences in practice. >=20 I'm not aware of any major implications. However, I think that if we provide for the distinction, the distinction should be used correctly. --=20 Best regards, Micha=C5=82 G=C3=B3rny --=-NmWD22Bug1sHWKjw/M90 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- iQKTBAABCgB9FiEEXr8g+Zb7PCLMb8pAur8dX/jIEQoFAluCi+xfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDVF QkYyMEY5OTZGQjNDMjJDQzZGQ0E0MEJBQkYxRDVGRjhDODExMEEACgkQur8dX/jI EQpgRxAAsSxc1WtZNsEfTEl1nKCXkC2AY3VMzqTky51ChRlFC1dr8lXvOsQpuh/j 4TbR89/0KcJ/lvCBJPTVj3wO1YvVqC+u4bXeZo+2+nCsR4zjRc+foTUbAtG53eQD o+RFaeYOVyVyLI3Ay8PQhjrJuW5IKCTdX6drnvXR4HuIWuSrVmaL+Gy8DthzuUGf GGS+5DHIDezQize9/dFzy3erFCkoPPF/JmQFUJXdW68lJJpIiV7tUvIsVZVCytCV XsT+ZO6q5pEktSixXgCKCdZfyS5DDdmzfNRSIgFXhjJaeIqd1yH6Z1RqG8Q/mfTy q0Mve83V9cNncnUQOYZKxgxXtzIpiqb/WviCAXaALCqR4uRP70Vw/bBnPkrwA1Pf tgbhOuWe/ZJKFcQh+YLUsXbm2FECnarOyjelSv15EsWBJ7Ek+XpVnTu5I9X3sv6L fECqYYCl1sCBYLqURop47EcM3PqdoeoGh4+juHTnfq9us4kuV4yp+4SMuDJswXU1 aQxwbiAX+PBRkUW15os6yWVg8ob/NbmzRNpOjj+4y4jDsrFk+r/HI+uyoDek/3wH /iDyxq4IRHhyARL9xmVBvX8fXdusM1f4gelWYCsYaFDDD7FjzzPdrzHTQn0oUA5s iQva9i9G2Z+ONjRhjgBjJ980K0CTcX8UwDMqtjagvXioGGpdUjc= =2mHF -----END PGP SIGNATURE----- --=-NmWD22Bug1sHWKjw/M90--