From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 94CA9138334 for ; Sun, 26 Aug 2018 11:09:56 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 28713E08C3; Sun, 26 Aug 2018 11:09:53 +0000 (UTC) Received: from smtp.gentoo.org (dev.gentoo.org [IPv6:2001:470:ea4a:1:5054:ff:fec7:86e4]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id A8D71E08A0 for ; Sun, 26 Aug 2018 11:09:52 +0000 (UTC) Received: from phjr-macbookpro.home (79.184.166.18.ipv4.supernova.orange.pl [79.184.166.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: phajdan.jr) by smtp.gentoo.org (Postfix) with ESMTPSA id F1A27335C7F for ; Sun, 26 Aug 2018 11:09:50 +0000 (UTC) Subject: Re: [gentoo-dev] [RFC] Solving the problem of huge number of wrong LICENSES=*GPL-[23] To: gentoo-dev@lists.gentoo.org References: <1535279962.1066.24.camel@gentoo.org> <1535280838.4490.16.camel@gentoo.org> From: =?UTF-8?Q?Pawe=c5=82_Hajdan=2c_Jr.?= Openpgp: preference=signencrypt Autocrypt: addr=phajdan.jr@gentoo.org; prefer-encrypt=mutual; keydata= xsFNBFL1sbcBEADcK86OePQHFFRgnUdXQe9NdQ0B1vFkSnYv6o2jvucD0w+ymZ+nyb1P1UYR 3XG18sRXO22+Ay9UfDJVr+Tq6SZkS3GUWSl0SxaOCCL6UZsw86VpNFXqR54yBKRVNwGPCjIn RkTGoV3O0dA5SWEP+ZzE80qwWDCxakMHdhqWb2LelVW2ihEmTVwBLH7fGG9X2UbxX1CFgbwp LptzXgHtqQY2jMuMYaf79toV6r5XBCPUcqpKE/2R937tSjPUyEQwXQLjnmHZFuTRDNHDYKyP iF80DtU+ultBpCUuR+GLQlnkNZmct5hP/UfMzqwqm0WTpZiszd7CTSo9k+KHoXrWG0A/wGLb WoZYwfUo8r4FyvMfLD2n3sSzBzK1R44rKLfnGxOG/HgxHEblRk80g4Oc8j5VIubZaRGL8BKY b03qSXH9JrZknANJFG15UQTnUmnyh8WPfyDDtpT4dVh/BtSzMgdXUTecZZbXGvEu5zRi1uZ6 c92zzEAYdaiNFb1Ydlm1ONNeaaNcQJmyfWn74rs530rrOO9m8f/YLN9PMKutVNNuDsgviguJ VyecXrejZkuvXgfuNcNPcKoYJYQReAIKLqpxy6cL/nw3Q4BwWsf3RGpmP5kSM4WsQ36hTjGy 0krcgjDuD8CAUR3gp6jJnrKWvzE/ERpz54/4jQKWgnWrzL15hwARAQABzSlQYXdlbCBIYWpk YW4sIEpyLiA8cGhhamRhbi5qckBnZW50b28ub3JnPsLBfQQTAQoAJwIbAwULCQgHAwUVCgkI CwUWAwIBAAIeAQIXgAUCWlin1QUJCUQpngAKCRBPGiVV6nGZHYs0EACN8xj3v5Zd3QnO6h4Q bM+q+ECcA1p/QVCUEHNODzj/GR/91SSuS6rzAwKycwTgxgH/BGjCa0vziQEFGlxtDFKOaZzg xu1ovuqGv1NYe7I/PO2+yFyg32/17vVnSIQNyzAMS3CqpTn5gif8CdplNouWrYTaf8n6lNgS dgduiv8BY2m7sr0nyOHRW2+BaKNpfvbzDodlpjIV/KV6BYJUnuO3E8p2yVTyIqBdJpP2tE2P pINOwxqfz7SM1dAFG29RcwaMR4xEbH5dBDTnHi+HbbdYhW6Luz24XXOZOvm0tf85IVMuiwgb MyldbOhkFZkgSLRlJgHn2JAAY6iahJDD2ZEdO/BWfjvDlhIwgAurIu5IYooKH5AME2dJCXD7 uPrqWlnay9wfc4MAEZSkztrNGzXinCDjEPKZRQmvd/JcLkmY//D/UGnyMfMx4kJcbErxxg3Z 7tsp+0N5Yvxa1ma2zLykHaeo4zAb/M8JWOK3HEGRU73iYE1tGZAj2MnsxGFtIH/e+YRy7K1B Q/zPgeGDEuNJoap67qd8NabBCWildEVGruQUAK5YBEus3fEXqhzHb/axfZ9s4bUK90Ca0LAQ chl5Du7zdiJRAN8PBzUur6qFmz5j0GfIL0iIujjNyFeP+YJoxRsEck6N64N7xc/G0Xu8uoSX 601VtcORdcWVJFlDHs7BTQRS9bG3ARAAt+cCe70vGOxrEWSqNrQL3s4SJcBK1DyHPc9RT7oO Q7iBKXW6FktFsKjiC9f+NXb6QSOtotm5/2LUcZzBBSurcmhXfBkxBbTCb7XOXA+aya/nreBC XQL3R7vPzr2p9FKk8f5w1WKFSYfmff7AZZWMnU9EFGLisgdmyH67oVSxDVeETw+8fvtTew5f /OlT0FzsTIlbG6+DVL//wLCliCgEEkAbr/Knc2PfrSoSMobDWz8NhVECCGbZ0tr1+xks8Zr7 f2UU4oRWBAp/UEhB3MrUDNJrtuXCbUoD1yTPx0pHjAvTP1yGdYLxv7BufYubsa1msPQtKX4o g6vG8aHLZO01Ih0Fce56CD+VCsFP0ciqfXX/mEvQcr3B0DqowSbDYlM8uDkcjmEWkqopnRge dRk6KKsmR5Yruwmrv+eRRmkSwXGAI7Rb8klrASENOrn9OSSF3CaC2YgV++lN9UiInJqlMYE7 CIAISJfY+vUuKg+VhPJbti2HvQMbFVyPmWUsc5rZuKCdjM9Gs4pPeFpRUUcjIylBJE1NlIw8 1mBft04Kbc5k60Ge79HakMvIvk/tnIDd/q31Q5Y1w11eWz6AjWwfSwlzFYUONfkpy32P5SDN q2k/ztMJf1uwjJ/7yU0DJCOXhd8zQT5RZOx/lfkwZO7Fg/TSwpTF+YtywCUjh1nFLskAEQEA AcLBZQQYAQoADwIbDAUCWlin9AUJCUQpvQAKCRBPGiVV6nGZHSc0EACpkamzCoBnKmkBuWTf 659a/PvQiRXHqccox/4SndR9HQGm23WBS/HHkOMPZc6+wSuIgrX3wV4S7BmZ+isOZ5nsg+6R dfa7lmg8RQzTkAlXu+5KY3/dsfoglCRuvAUCSbOa1E8uR6ke/CQpfV5Ng9ssER28xG1dcXyO 2gwXISzS4PH9NtpB2xbwcmCvswHoGYfevzJ/312QelaiUV9jQr3oqiaVEozdSgtAmuJRCkzf BYiPlOcXR1VqnmA6Yh0hCIZVVlIfhnObiAYndvaO4Ara9QzWMUyWMd17n4Lck1yG2qH/SsJN edsUw7Hi2hDUEYFAYe+M0Z4pgBti05tAHQ9jfJhwF3U17GmOWJh5AZbs7l39+6xBfZxsIe/7 jceKpxxM9XmAXNSklKLWmClAvQAe1nRGKAvWWgIHOWk3nRr6U+BwnEEl2LiAOSI/FjV4HfeM pHqaDDUsjelvIq02zt3WG+066vsY1W1fwGVX1unqoxUtNH5a+helShUFN7ptTRVScYpTPdcY 2h1WjdwcobJlv8gTekOkjCFnC+GYtmS4tJ3BC+gsfGMioj4uEHMOnJUvamUaYKuTi+dP5Lsa k4IYJNWZ/zYrZzsqnq6S6jwRrep/9UiChB3z/Of6D83pVF/lt5f1hSxC1S4xLkcSVJig4gL7 IeggvaB6Y+vs1E6ROg== Message-ID: <5bf34233-8740-44e2-e4d5-2f647a703584@gentoo.org> Date: Sun, 26 Aug 2018 13:09:41 +0200 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 In-Reply-To: <1535280838.4490.16.camel@gentoo.org> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="CVoKKTPYk2P3BgfkvBh1Y3L36AJw815fh" X-Archives-Salt: 6a66dae5-4203-4530-8e82-de7ea5b28db1 X-Archives-Hash: 0862696e6272e0e5ad588c2bcd78f8c7 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --CVoKKTPYk2P3BgfkvBh1Y3L36AJw815fh Content-Type: multipart/mixed; boundary="KfCQyMs2iR6pvMAiYIETv9Li7Pt9xKk1b"; protected-headers="v1" From: =?UTF-8?Q?Pawe=c5=82_Hajdan=2c_Jr.?= To: gentoo-dev@lists.gentoo.org Message-ID: <5bf34233-8740-44e2-e4d5-2f647a703584@gentoo.org> Subject: Re: [gentoo-dev] [RFC] Solving the problem of huge number of wrong LICENSES=*GPL-[23] References: <1535279962.1066.24.camel@gentoo.org> <1535280838.4490.16.camel@gentoo.org> In-Reply-To: <1535280838.4490.16.camel@gentoo.org> --KfCQyMs2iR6pvMAiYIETv9Li7Pt9xKk1b Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable On 26/08/2018 12:53, Mart Raudsepp wrote: > The common issue here is that upstream COPYING files really do only > talk about one of the versions. And then you get to validate or source > files to be sure that they do have a "or later" clause in them. And > then on each bump you ideally should validate it again, etc, that no > sources without "or later" allowance are in there... Yup, precise tracking of license metadata can be a pain. I'm not really sure if that level of it is worth for us as a distro. For _importing_ other project's source code directly into one's project precise license compatibility matters a lot. That's not the scenario we're in. I see LICENSES as mostly a mechanism for end users to accept or reject EULAs etc, and I'm curious what are other common scenarios. Micha=C5=82, could you elaborate on why not distinguishing more precisely= between these GPL variants in LICENSES is a _problem_ ? I can certainly see the information is not always accurate, but it's not obvious to me how severe is the downside, what are the consequences in practice. Pawe=C5=82 --KfCQyMs2iR6pvMAiYIETv9Li7Pt9xKk1b-- --CVoKKTPYk2P3BgfkvBh1Y3L36AJw815fh Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2 iQIcBAEBCgAGBQJbgop6AAoJEOOGGXc/wLdaEXYP/Ark7xhg8T42+WtE+HxjxYlL +WEifJyGVXsga5bG25w83m1U+sgxXoZ3WD1xnDKTbRtxcPaDsQwfjVNn1LIWnG1f VdNhPScmvya6dxzT4TRLoSu6oU25TVx3jVi8VjxxCOcavH3L0Zyj8+Jkgg20cTVK eSBJp6YOeH7WZOgcwo4w0QTib9/ePLmQ/fH9UQrxspTtnXhjN9DpQhTYbicufnhA /rrX0miIUshM0uRtlKc1KsN4d/tjFOWV8AmUYkrPVvlR3TXs4gPkOF09JKHhfBpT yg2EKjA1qPdRnjf1RHzIJGceDCB7Q4yFrypjVtMInbHi2U+X+sS/D6uwYy1t7jBF wx1n0K17zdEbuFgtIrR17BC5kTZJ/NBIZ9kUG+teoZbrh2BQeboU+tycmF4fxZtM s1U+J1K5I941GMQVj5Zv8ksaqsUvklsCj5W4b22iVVHfvtZ9nPobkLe5dLC/XtVb 03+gy4Mrjxh0Ui1KOCWgQymkEOIqW15arJBcuqKQjLJQL8CQRe8Nk5DpMaS5bUaO KrJP6yXGBo6URtiYiR3KOvGimxm7dSbTjTtyZiJbQUoJhO430BHCsK4scYjWlxt5 joT9Ym1DJGheOtAUTd2v9aUsRpaOad1EnOnm/bw1GUaE7xFg0WdPSoQZJVMgol6h u5wm5kVPdU7aojz/yDBN =QZ8/ -----END PGP SIGNATURE----- --CVoKKTPYk2P3BgfkvBh1Y3L36AJw815fh--