From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id BA2C7138334 for ; Fri, 1 Jun 2018 01:52:39 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 3ABABE086D; Fri, 1 Jun 2018 01:52:37 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id E3491E0849 for ; Fri, 1 Jun 2018 01:52:36 +0000 (UTC) Received: from a1i15.kph.uni-mainz.de (host2092.kph.uni-mainz.de [134.93.134.92]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: ulm) by smtp.gentoo.org (Postfix) with ESMTPSA id 74EEA335C30; Fri, 1 Jun 2018 01:52:34 +0000 (UTC) Message-ID: <23312.42718.417419.212368@a1i15.kph.uni-mainz.de> Date: Fri, 1 Jun 2018 03:52:30 +0200 To: gentoo-project@lists.gentoo.org Subject: Re: [gentoo-project] Re: [gentoo-dev-announce] Poll: Would you sign a Contributer License Agreement? In-Reply-To: <535aa147-a5b3-2578-fb4c-b59fc85af155@gentoo.org> References: <23310.46809.293787.611345@a1i15.kph.uni-mainz.de> <20180530182136.GB18004@kroah.com> <23311.6978.886855.373818@a1i15.kph.uni-mainz.de> <535aa147-a5b3-2578-fb4c-b59fc85af155@gentoo.org> X-Mailer: VM 8.2.0b under 24.3.1 (x86_64-pc-linux-gnu) From: Ulrich Mueller Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Project discussion list X-BeenThere: gentoo-project@lists.gentoo.org Reply-To: gentoo-project@lists.gentoo.org MIME-Version: 1.0 Content-Type: multipart/signed; boundary="pgp+signed+xJF6/F209LEjZEi"; micalg=pgp-sha256; protocol="application/pgp-signature" X-Archives-Salt: ecfd43ae-0929-41d1-8946-696e0bba9a74 X-Archives-Hash: 45e0559985b0c2035f763d69285aec82 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --pgp+signed+xJF6/F209LEjZEi Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit >>>>> On Fri, 1 Jun 2018, Jonas Stein wrote: > On 2018-05-30 23:44, Ulrich Mueller wrote: >> We simply cannot. We have files in the Gentoo repository that are not >> under a free software license, and for these we need an extra clause. >> Otherwise we would have to specify in the policy that certain commits >> are excepted from the requirement of a Signed-off-by line, and IMHO >> that would be a much worse solution. > That is a good point. > Which files do not have a free software license in the tree? > Are these just some patches or files in the "files" folder of the > packages or is there something else? The main concern are license files which are not modifiable. These are located either in the licenses dir of the Gentoo repository, but it also applies to COPYING (i.e., GPL) files in any project repositories. With the new policy in force, non-free third party patches would have to be excluded from the Gentoo repository in any case, and would e.g. be packed into a tarball and placed on distfile mirrors. (Last time I checked, there were only few non-free patches around, though. It is rare for software to be patchable and distributable, while at the same time having a non-free license.) > Are we allowed to use the free github repository for non free files? If the policy would force us to resort to such tricks, then something would be wrong with that policy. It is supposed to apply to all repositories of Gentoo projects, regardless of where they are hosted. > We could upload the non free files to a different space and exclude > these from the repository, like we do it for large patches already. Ulrich --pgp+signed+xJF6/F209LEjZEi Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQEcBAEBCAAGBQJbEKbdAAoJEMMJBoUcYcJzTY0H/3OQhcmAjSWd7K0JmXyUt6vu Zbm9GUi05h7g58QXAKaJmxRnY6/bQlK/D2Xq04QLIPYTjeehtH5iv9ciFo1XXazV 7lgClofZHidgBiJkMIbDaQbeFBG/5DClRmd6aOf63K83x5e2SWh+m77jkRl83Jlj Op26SO0m9TAl5EZD4cAQ5lqiHj68EO8CnwjouirVY1t8q3oswLqTbkAnY8EhYfjB 4M0FR+PFB9e/V76WO4huf2cSQYr02OXZ83nEkypxoU7OIaqJ+ILTBkBp5+s5f8dP TesOONUzlW8gan+pgcmdUMGgt3JbKKgdWbTMUukkEWNzieT0qu+kH9EV7s4ILSo= =C3r+ -----END PGP SIGNATURE----- --pgp+signed+xJF6/F209LEjZEi--