From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id B6CF5138334 for ; Thu, 11 Oct 2018 21:09:43 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 93C93E0960; Thu, 11 Oct 2018 21:09:42 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 3E319E095F for ; Thu, 11 Oct 2018 21:09:42 +0000 (UTC) Received: from localhost (unknown [185.31.167.185]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: bircoph) by smtp.gentoo.org (Postfix) with ESMTPSA id 75953335CF3 for ; Thu, 11 Oct 2018 21:09:40 +0000 (UTC) Date: Fri, 12 Oct 2018 00:09:36 +0300 From: Andrew Savchenko To: gentoo-project@lists.gentoo.org Subject: Re: [gentoo-project] Call for agenda items - Council meeting 2018-10-14 Message-Id: <20181012000936.39875e5f4224c1c009935adf@gentoo.org> In-Reply-To: References: <20180930140524.015249f0@sf> <20181011153139.7700484dc6c452ed570df66a@gentoo.org> X-Mailer: Sylpheed 3.7.0 (GTK+ 2.24.30; i686-pc-linux-gnu) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Project discussion list X-BeenThere: gentoo-project@lists.gentoo.org Reply-To: gentoo-project@lists.gentoo.org Mime-Version: 1.0 Content-Type: multipart/signed; protocol="application/pgp-signature"; micalg="PGP-SHA512"; boundary="Signature=_Fri__12_Oct_2018_00_09_36_+0300_P=MQJ1po_XvVRag." X-Archives-Salt: 9208e5e0-49f7-4055-900e-21c7e7f8f8cc X-Archives-Hash: 362ec4d11bb9493ebdea7ba60c61e378 --Signature=_Fri__12_Oct_2018_00_09_36_+0300_P=MQJ1po_XvVRag. Content-Type: text/plain; charset=US-ASCII Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, 11 Oct 2018 19:29:57 +0200 Ulrich Mueller wrote: > >>>>> On Thu, 11 Oct 2018, Andrew Savchenko wrote: >=20 > > On Wed, 10 Oct 2018 09:43:52 +0200 Ulrich Mueller wrote: > >> The new copyright policy (GLEP 76) leaves it to projects to decide > >> whether they use the long form or the simplified form of the copyright > >> attribution. I would like to ask the council to decide that the > >> simplified attribution [1] shall be used for ebuilds in the Gentoo > >> repository. >=20 > > I'd like to voice strongly against this motion. >=20 > > Rationale: >=20 > > - We have out of the Gentoo repository ebuilds which may be > > incorporated in the main repository and are licensed properly but > > an author requires his copyright in the first line to be preserved. >=20 > The author's copyright will be preserved, regardless if he is listed in > a copyright line or not. It would even be preserved if there wasn't any > copyright notice at all. Okay, I'll rephrase more precise: author has "Copyright years John Doe" as the first line and demands this to be preserved. I had cases like this years ago (e.g. I was unable to use ebuilds from an overlay in the main tree because the author refused the first line to be changed to "Gentoo Foundation"). And this problem is present now with other people. > The sole purpose of having a copyright notice is to protect us against > an "innocent infringement" defense under U.S. law. It really doesn't > matter much who is listed there (so we can list "Gentoo Authors" which > isn't even a legal entity), as long as we have a notice at all. It does matter, at least in some other countries (non-US). Anyway I doubt that even in US committer has right to change copyright notice without author's approval. > > GPL-2 allows us to use such ebuilds, but our past copyright policy > > mandating "Gentoo Foundation" doesn't, as well as proposed motion > > which mandates "Gentoo Authors" instead of the list of authors > > including main author if they require so. >=20 > It is virtually impossible to account for all authors of an ebuild, Why? We have git log. And we have "and others" clause to account for trivial changes, e.g. if person making some mass-package trivial change, this may go to "and others". > and listing "Gentoo Authors" is only done because of practical > considerations (as I had outlined in the rationale). Also, please don't > confuse the copyright notice with an attribution of authorship. > The latter is achieved by the Git (or another VCS) commit information. > Again, this is already outlined in GLEP 76: "Projects using this scheme > [namely, 'Gentoo Authors'] must track authorship in a VCS". You are correct, but this doesn't give the right for commiter to remove explicit "Copyright years John Doe" line. If you are confident it does, please cite an appropriate law. > > - GLEP 76 already did significant harm to our community by > > outlawing current anonymous or pseudonymous contributions. Moreover > > we have people who want to join community, but keep their identity > > hidden. This is understandable, especially for security or privacy > > oriented software. The harm should go no further. We have a lot of > > talks how we need more developers, but what we are doing in many > > steps including GLEP 76 is exactly the opposite: we are creating > > additional barriers due to vague and bureaucratic reasons. >=20 > How is that relevant for the proposal at hand? Because situation is bad now and the motion makes it even worse. > > Of course if authors wants to use "Gentoo Authors" this should be > > allowed, especially for automatic migration from the "Gentoo > > Foundation" line. But we must preserve the right to use explicit > > list of authors (including "and others" if necessary) if a > > maintainer wants so. >=20 > Exactly. The aim of the "simplified attribution" policy is to simplify > modification of ebuilds, because contributors (whether Gentoo developers > or users) shouldn't have to think about the copyright line. >=20 > The purpose of the proposal explicitly is *not* to stop anybody from > adding an ebuild with a preexisting copyright notice. However, we should > make it clear that we strongly prefer the simplified form for ebuilds in > the Gentoo repository, entirely for practical reasons. The way I read it it moves back to the old "Gentoo Foundation" policy with "Gentoo Foundation" replaced by "Gentoo Authors", which will not allow to commit ebuilds without "Gentoo Authors" in the first line. Best regards, Andrew Savchenko --Signature=_Fri__12_Oct_2018_00_09_36_+0300_P=MQJ1po_XvVRag. Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE63ZIHsdeM+1XgNer9lNaM7oe5I0FAlu/vBAACgkQ9lNaM7oe 5I1NXQ/9FGaeBcLr3+a/MZr3fOcaJP5p85iZ+uY/KaPj9NmqXJ7xLcSp0Gs++lvc FXUxMVTU5Es2hPXBGCdkrJqvY7leBHibYKv5N4Lm7c8fqASby7rorWTs3McLhMLt A2Tg77VGBZzed2U1OLe6p9ObsJTUD/lVVEBIMVbMbpNnQMTT/1XgH3S/ijmlzBbM FJCsamIXdSl3CsJu9ByDcFNKuxZ7qXYWl8gj+1A95QicUVM93L0SEp6DPfM70P7m jnZL3xVGrTG9GecHyqwrd3N/4IOKcxLqtBQ+FzZNniPTU37DgGZ+GWQGE4APkWas 87sVyzy3qXJlqN+hZcwaOnBY82ORWm/skXnk7WagDkfd9IWPv2dTD46l5V6ncLTg hOZgJS8mQM0T03T2cCylnJoUIt1qoU/9A0PUwaSJFaN4Qxvg7IL2cdrTxETzeYWT HVgj5UMy5sBzYyALOdCf6F+iUx4PYGBlg8C5JthZuqoWEm69AbU5TPnSRuT4r5eN tKxZYUjCALzDdGdpGieQyJS9Flg32SWZzvD/ihQEUoSsjVmQS/Gja/ykQGkfjneK 3XNAOBboljzOp2TPs87VmIGzBsYgSuCXvr7XZ3BUvz+cEmmdd2lANjC9pajU1J73 t7HA219AkxeACe/1KcuoTLCaoASKQ4KqoBJDOfNpEnCC4V3TSwg= =svXN -----END PGP SIGNATURE----- --Signature=_Fri__12_Oct_2018_00_09_36_+0300_P=MQJ1po_XvVRag.--