[gentoo-dev] Truecrypt 3.0 License

[gentoo-dev] Truecrypt 3.0 License

[Dane Smith]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello everyone,
As I'm still the new kid on the block so to speak, and since I know
almost nothing about the legal side of things, I've decided to err on
the side of caution with this.

I would like to add the license for truecrypt-7.0 to Portage. Link is
here http://www.truecrypt.org/legal/license

Does this license look ok to everyone? If yes, I'm assuming it's going
to go in the same groups as the prior truecrypt licenses that are
already in Portage?

Thanks!
- -- 
Dane Smith
Gentoo Linux Developer -- Crypto, x86 teams
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=LZKn
-----END PGP SIGNATURE-----

Re: [gentoo-dev] Truecrypt 3.0 License

[Ulrich Mueller]

>>>>> On Tue, 12 Oct 2010, Dane Smith wrote:

> I would like to add the license for truecrypt-7.0 to Portage. Link
> is here http://www.truecrypt.org/legal/license

It says "TrueCrypt License Version 3.0" not 7.0?

> Does this license look ok to everyone?

It looks very similar to the truecrypt-2.8 license that we already
have.

> If yes, I'm assuming it's going to go in the same groups as the
> prior truecrypt licenses that are already in Portage?

I don't see any truecrypt* license in profiles/license_groups so far.

But to answer the question more generally: A new version of a license
should only be added to groups like FSF-APPROVED or OSI-APPROVED if it
has been approved by these organisations. On the other hand, for
groups like MISC-FREE, it is as you assume. There the presence of a
previous version is a good indication that the new version should also
be added (given that it's similar enough to the previous version).

Ulrich

Re: [gentoo-dev] Truecrypt 3.0 License

[Dane Smith]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 10/13/10 02:47, Ulrich Mueller wrote:
>>>>>> On Tue, 12 Oct 2010, Dane Smith wrote:
> 
>> I would like to add the license for truecrypt-7.0 to Portage. Link
>> is here http://www.truecrypt.org/legal/license
> 
> It says "TrueCrypt License Version 3.0" not 7.0?
> 

The license version is 3.0. It's for software version truecrypt-7.0a.

>> Does this license look ok to everyone?
> 
> It looks very similar to the truecrypt-2.8 license that we already
> have.
> 
>> If yes, I'm assuming it's going to go in the same groups as the
>> prior truecrypt licenses that are already in Portage?
> 
> I don't see any truecrypt* license in profiles/license_groups so far.
> 
> But to answer the question more generally: A new version of a license
> should only be added to groups like FSF-APPROVED or OSI-APPROVED if it
> has been approved by these organisations. On the other hand, for
> groups like MISC-FREE, it is as you assume. There the presence of a
> previous version is a good indication that the new version should also
> be added (given that it's similar enough to the previous version).
> 
> Ulrich
> 

Ok. Given this information, I will be committing this license along with
the new truecrypt version later tonight unless someone raises a concern.
Thanks!

- -- 
Dane Smith
Gentoo Linux Developer -- Crypto, x86 teams
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQIcBAEBAgAGBQJMtaMGAAoJEEsurZwMLhUxg6EP/jm/57QqW8McefIY+Du7AWeI
szZqhxjZlblBpXyDnjG+ucNWmHektXsgIOuLwvETA5tU0ruqmzYmfkV/r2KMQSR7
M6cSpogCUV/6AvHXZgFogLNmIj8hbF28GqcGw8JsifrDWmMhCgDdryLaTvx/zyBQ
j72VcP4JKHmL5Xzw3stTt+SpFI920nspyY0XA9rM3LnYSywvXi5PvrDXMDJkZQSl
eGwufLuymVX1QEx+uUR1Yv9Vnk2jepJDlrC+PeUkZWPEy9Xf2QUIOYpmG+KpJQ9c
lmX/5MCdjU436JnCrRe2Qdu4weO5M+LwdEU1/RbTkWrMOtiH95NAY00xIcC9/PKZ
JGC/0HYqi2Y+XIUty0MZl/oRpGaM58rjzTeshkiNGUBeuy8mGNjQLo03byqQuGNL
KaaBnZKGXjhTGTsf16oQe+fr/hHZbnZeJJ9B4PrZsHaYVyWdm71K6np8B4wF3UTc
emT8RSYjCmek7wPmbIlNwVrlcfptPU0jmBLdF2WHdOq2zr2pHWjdf2OMYB1tBzri
DuQ4s1gpctmUqUEngBiPlgl6bLnzRs2fK0R7bLRFdhse/f6nulONZAj4POqxF6Yy
92IhcN6+E6GvbjuzbpIrpC46pqVPpoVo2NnGh/1iCCUdpcKjCCJXB8zhbO+ClM+6
d37LVRlldgFpeAVxIG6t
=LfBC
-----END PGP SIGNATURE-----

Re: [gentoo-dev] Truecrypt 3.0 License

[Dane Smith]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 10/13/2010 02:47 AM, Ulrich Mueller wrote:
>>>>>> On Tue, 12 Oct 2010, Dane Smith wrote:
> 
>> I would like to add the license for truecrypt-7.0 to Portage. Link
>> is here http://www.truecrypt.org/legal/license
> 
> It says "TrueCrypt License Version 3.0" not 7.0?
> 
>> Does this license look ok to everyone?
> 
> It looks very similar to the truecrypt-2.8 license that we already
> have.
> 
>> If yes, I'm assuming it's going to go in the same groups as the
>> prior truecrypt licenses that are already in Portage?
> 
> I don't see any truecrypt* license in profiles/license_groups so far.
> 
> But to answer the question more generally: A new version of a license
> should only be added to groups like FSF-APPROVED or OSI-APPROVED if it
> has been approved by these organisations. On the other hand, for
> groups like MISC-FREE, it is as you assume. There the presence of a
> previous version is a good indication that the new version should also
> be added (given that it's similar enough to the previous version).
> 
> Ulrich
> 

On a related note, given their download page,
http://www.truecrypt.org/downloads, do you think it's necessary to fetch
restrict it? They only "suggest" to point to them.

- -- 
Dane Smith
Gentoo Linux Developer -- Crypto and x86 Teams
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=Axjx
-----END PGP SIGNATURE-----