From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 791EA138D6E for ; Mon, 24 Oct 2016 23:44:07 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 16E60E0B25; Mon, 24 Oct 2016 23:44:00 +0000 (UTC) Received: from mail-qk0-f181.google.com (mail-qk0-f181.google.com [209.85.220.181]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id B94F5E080A for ; Mon, 24 Oct 2016 23:43:59 +0000 (UTC) Received: by mail-qk0-f181.google.com with SMTP id n189so250211827qke.0 for ; Mon, 24 Oct 2016 16:43:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to; bh=LTUANqja13adYf2Z1JqldZpqACO8TOVZHqYbn9tsMPw=; b=WajuDFh+nZD0OdX9dCXWmnDX25ossQdkjircDTqdGurDFlkbdW5f6VE6q1K8V4Hhgd vUQoWtKeHe9InlDZmSSH63HM+T/1u1vyzmbsGHg6oRUXQE3HP+YckcqSwZfgjRLrz+9U FRd4DaIK+5F2/HGhiC9xcOc0vN9QhB+VElk1RjkplipUrWvrrw20jT/MRH+fJsl8OkHK 518OuDLYaUUhcVjJ84Gt7MWO2rCAL+Qa3xLAfKSPlVGecxF55UCNTRt5Nu/y0vXD8X8g gGTAB1fM7pQV9q7tYR5/E9k42czR+EWzpc/mzMP5CWoTAqzzAHo1tadlihYnJjNXbzI7 sybA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to; bh=LTUANqja13adYf2Z1JqldZpqACO8TOVZHqYbn9tsMPw=; b=RGZ+ZGZyeyCYc/wENmXBTW5uHrJniINYbkDuNBtCfWIZncsETgIc2SmV3KZOrIr8RM 5TqdlpWfA+RklFxFqahzt9BZgeLJPmnOCnRf5c1PQh6Tbwr6KENv4P1IjsuUC5M8Cdix Uh+z85Wb+unRl4ooZfJzSBmiohEAtE+vpVH/KHpt13+4h0yMOWPUHID3syAIA2x7kD/z g7wVNgbf79i3mxW+cTAIz9rwEDhDtF/XuG+LIjbYu/uC0gC6GUelStJMQOTiEwFE58Nl lAJJIuY9H1S7ANBbc6awDnSdqM3KW9tHJoXZruzvJiaV83ukVFaHfeUZAzbi76/GT6zg vJuA== X-Gm-Message-State: ABUngvfu5ahoxCAp12exxBK/V/ePOpwM5pE5K/mydhgJpDXkQu5H9V8B1LsBp+rsaFabcfI6Wdt8Wx428gpVFg== X-Received: by 10.55.157.8 with SMTP id g8mr18967389qke.122.1477352638842; Mon, 24 Oct 2016 16:43:58 -0700 (PDT) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 Sender: freemanrich@gmail.com Received: by 10.140.89.83 with HTTP; Mon, 24 Oct 2016 16:43:58 -0700 (PDT) In-Reply-To: References: From: Rich Freeman Date: Mon, 24 Oct 2016 19:43:58 -0400 X-Google-Sender-Auth: JXmCSYBhaZq20tfHJXXuKZzYIl8 Message-ID: Subject: Re: [gentoo-dev] Contributed ebuilds and copyright questions To: gentoo-dev Content-Type: text/plain; charset=UTF-8 X-Archives-Salt: b7271524-6b4c-4d13-af41-d087cedc71f7 X-Archives-Hash: c0354a81a249f185a512a8d134f82f4b On Mon, Oct 24, 2016 at 7:31 PM, Matt Turner wrote: > > Yeah, it seems to be painful no matter what you do (CLA, copyright > assignment, listing copyright holders) just in different ways :) > Well, the advantage of assignment is that it does simplify copyright tracking, since you own the copyright on everything. The problem is that it potentially cuts out a lot of contributions. There is also the problem of nations that do not allow assignment (though that could also be fixed in theory by just ending the Gentoo German conspiracy). I personally tend to favor a mandatory DCO (we absolutely need to know the copyright status of our code), and a voluntary FLA (which I tend to prefer to outright assignment as I think it lines up well with our always-free social contract). The issue remains of what to do with the copyright notice. I suggested just having enough names on the line to account for 51% of the code, which as far as I can tell is completely legal. That doesn't preclude just listing all the names (which is ugly, but administratively simple). But, that does help cover us in cases where we have some ebuild where we can only account for 60% of it. It also allows us to borrow anything from any other project that already has its copyrights well-documented. FYI, one of the original sparks that drove some of this thinking was the eudev copyright fiasco (which like a lot of systemd-related stuff was blown out of proportion IMO with things being attributed to malice which were simply a lack of thinking things through). This was the first time Gentoo really forked and internalized a major external project, and there was a clash between our previous practices designed for dev-written code and the large import of external code. Under the draft copyright policy we'd have just maintained the previous copyright headers, perhaps just reformatting them to the top of the file per our convention if they weren't already there (which is completely legal). If at some point enough code in a file got rewritten to have majority-FLA authorship we'd have the option to change it to Gentoo and others, though we wouldn't have to. -- Rich