From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id AA195138350 for ; Fri, 1 May 2020 10:40:01 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id E1738E09DF; Fri, 1 May 2020 10:40:00 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id C3D4EE09DF for ; Fri, 1 May 2020 10:40:00 +0000 (UTC) Message-ID: <2f419389bdd7f49e8330243a27cd9eaa32e99a7d.camel@gentoo.org> Subject: Re: [gentoo-nfp] Social contract and its effect on upstream software choices From: =?UTF-8?Q?Micha=C5=82_G=C3=B3rny?= To: gentoo-nfp@lists.gentoo.org, Alec Warner Date: Fri, 01 May 2020 12:39:54 +0200 In-Reply-To: References: Organization: Gentoo Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="=-bbQ7BDuzgdU9N4c1VoZL" User-Agent: Evolution 3.34.4 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-nfp@lists.gentoo.org Reply-To: gentoo-nfp@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 X-Archives-Salt: 6e458ffe-8be8-4077-b316-22de8845facf X-Archives-Hash: e2a46fc119a1976eb2386f2a8ab72d4e --=-bbQ7BDuzgdU9N4c1VoZL Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Fri, 2020-05-01 at 12:34 +0200, Ulrich Mueller wrote: > > > > > > On Fri, 01 May 2020, Alec Warner wrote: > > Consider a case where we have a piece of software and its open source. > > The open source software has various plugins, some of which look > > useful and we may wish to deploy them for Gentoo. However, we must > > consider the social contract, hence this discussion. > > Can we use the plugins if: > > (1) They are closed source (e.g. upstream provides binaries only with > > a restricted non-free license.) >=20 > IMHO it would contradict the Social Contract: > "However, Gentoo will never depend upon a piece of software or metadata > unless it conforms to the GNU General Public License, the GNU Lesser > General Public License, the Creative Commons - Attribution/Share Alike > or some other license approved by the Open Source Initiative (OSI)." >=20 > > (2) They are free software (e.g. FSF / OSI approved license) but they > > cost money. >=20 > No problem there. Also, we can freely redistribute them if they are free > software. Are we talking of grsecurity here? ;-) --=20 Best regards, Micha=C5=82 G=C3=B3rny --=-bbQ7BDuzgdU9N4c1VoZL Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- iQGTBAABCgB9FiEEx2qEUJQJjSjMiybFY5ra4jKeJA4FAl6r/HpfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEM3 NkE4NDUwOTQwOThEMjhDQzhCMjZDNTYzOUFEQUUyMzI5RTI0MEUACgkQY5ra4jKe JA4EiQgAiIM+wCJwqS+HHjOf1kQ15YF9fDsSoEY5sfcD7iKWhR9zcLtVV1iQxBxO I44g/LoeU/TxtiSHfwGKZHeGo+uyVE7hc8PeTyRdblhoUcL+PCYrx4JsgkXdIdij Td9vaG6fTzohb1r61mDOKd3zdSKV3I81pih8jAet7CjIINnFrwQTkVONBwcMWfeI gUITfsD+HEhEiP0aj0rAT2kryI+0pZMTKB0CNjGL9RZBGZFydbmIWrzE3GTWje86 YC65b1O/8aUuOh/uje1361McyCOdsx/C14557zxyPckCxEd4ufusT5ps5VKwciVk 9ihGdjGZM904FyhzYjc2R///1TDCnQ== =uKpo -----END PGP SIGNATURE----- --=-bbQ7BDuzgdU9N4c1VoZL--