From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (unknown [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 29E81138334 for ; Sat, 26 Jan 2019 22:12:47 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 2B747E0AFC; Sat, 26 Jan 2019 22:12:42 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id D29CBE0AF8 for ; Sat, 26 Jan 2019 22:12:41 +0000 (UTC) Received: from pomiot (d202-252.icpnet.pl [109.173.202.252]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: mgorny) by smtp.gentoo.org (Postfix) with ESMTPSA id C4B08335D52; Sat, 26 Jan 2019 22:12:39 +0000 (UTC) Message-ID: <1548540755.2778.10.camel@gentoo.org> Subject: Re: [gentoo-project] What should the default acceptable licenses be? From: =?UTF-8?Q?Micha=C5=82_G=C3=B3rny?= To: gentoo-project@lists.gentoo.org Date: Sat, 26 Jan 2019 23:12:35 +0100 In-Reply-To: References: Organization: Gentoo Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="=-hAwVntdOCbCx9QKUY44O" X-Mailer: Evolution 3.26.6 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Project discussion list X-BeenThere: gentoo-project@lists.gentoo.org Reply-To: gentoo-project@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply Mime-Version: 1.0 X-Archives-Salt: f4e882d7-587d-4b6d-951b-722e83b32ce4 X-Archives-Hash: 95cae7e331f333a59f1a81b82e64952e --=-hAwVntdOCbCx9QKUY44O Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Sat, 2019-01-26 at 22:04 +0100, Kristian Fiskerstrand wrote: > I would like to point the community at the following bug > https://bugs.gentoo.org/676248: > Bug 676248 - non-free licenses are accepted without user prompt >=20 > In summary the question is whether non-free licenses should be accepted > by default in Gentoo. today only licenses requiring EULA are not > accepted by default. So this is a good opportunity to discuss whether we > should deviate substantially from other distros like Debian. >=20 I think the key point in this discussion is: what is the reason for this change? Is it ideological ("because RMS tells us it's bad")? Is it copycat rationale ("because Debian does it")? Or do you have any specific practical implications to support this? (They should really be listed in this thread! Otherwise this really feels like it's a change requested to suit somebody's fancy). My personal opinion is that our default ACCEPT_LICENSE should be a safe default for our users. Not because they could get impure with non-free software but because we don't want them to fall into pitfalls created by restrictive licenses. Most notably, we don't want to require users to verify whether they are allowed to use the program they've just installed, or whether they can build it with custom patches. If this change intends to help with this, I'm for it. However, I really do think you should clearly define the goals. For example, are you going 'free' to the point of defaulting to USE=3Dbindist? Also, what about restrictive 'free' licenses that can actually get people into trouble, like AGPL? I personally don't think it should be allowed by default. Given the recent example, we don't want people getting into trouble by upgrading berkdb on their systems, if they just happen to use it and don't know the upgrade requires them to change their online applications. --=20 Best regards, Micha=C5=82 G=C3=B3rny --=-hAwVntdOCbCx9QKUY44O Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- iQKTBAABCgB9FiEEXr8g+Zb7PCLMb8pAur8dX/jIEQoFAlxM21RfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDVF QkYyMEY5OTZGQjNDMjJDQzZGQ0E0MEJBQkYxRDVGRjhDODExMEEACgkQur8dX/jI EQqCohAA8Pxp1VO6tlFftfsZPP0VybUJiJseECbvubk1+hILKhEk9BffDJr+wt2Z 1WhbRxyOr6Unvd8U/56Y/Rbx1ogfYiucWwhHxwVGuHB3JjjrwY3iOh1N0+EIyASP pXOHWUuh7pEpgkvgCvODT672o8ZiUTKA+GPSy3Yd3AH/8dJYESVVnG1EFAAJiRUO CluXuMTMbBirYRPJNR4dQJjtqWMC5UKjiOm19NX+kijEWthnEsobyJyEinx1WJQs 15BbRBWXi7A4VbYZScmffm/fdwMGpHFqWKBvSv1luvw9dmQkTvZeA4JuJFrklUL3 pK9wZwjGkepE0fLsIHtKE9AgDXzOLO83W5gwgHCw9ive99Xpu+9QETJ5/lBDTtV3 9zW8oNBjmiBgjFvKS2vdiYSPb4s74uMWpCpEkiUnNfpq6HMOo8WWkbg3PMjj7Bgl 66ZIhAaCuc0Jv2G+bkwoA27UVydJ5DTc9A3LBiYNutqfxl/e19qSxcGH45OpXeWp 0yY3iIbBfqxAdnU3mFgZvNek6snMyS0/jjmt620815Swze9jCtrFuloXDubhfjtX VmANs2I8fpUetD40AhtzZtSZ9epBxdoXcbXM/BiMkztyfUcnlo5e1qHfuMB5EkwU 1JlKkYbp1dl6oJ0yEK2QHfFsy1Q3EPIenLD8CshOBoWV7X3Fetw= =7BfH -----END PGP SIGNATURE----- --=-hAwVntdOCbCx9QKUY44O--