• About debian/patches/* licenses

    From =?UTF-8?B?6YeO5bSO6ICV5bmz?=@21:1/5 to All on Fri Dec 2 08:20:01 2022
    Hi,

    In researching the licenses of the dependent libraries of the programs I created,
    I noticed that some packages could be non-GPL library become GPL library by patch.

    * The original project is not GPL
    * There is a mention in the copyright that debian/* is GPL
    * Patches to the library source code exist under debian/patches

    So far I have found heimdal and libsqlite packages.

    I feel that this is an unintended license change due to the addition of the license description for debian/*.

    Many projects are applying GPL2+ to debian/*, is there any recommendation? Personally, I think there are fewer unintended accidents if LGPL is
    applied.

    Package maintainers are encouraged to consider this...!

    <div dir="ltr">Hi,<br><br>In researching the licenses of the dependent libraries of the programs I created,<br>I noticed that some packages could be non-GPL library become GPL library by patch.<br><br>* The original project is not GPL<br>* There is a
    mention in the copyright that debian/* is GPL<br>* Patches to the library source code exist under debian/patches<br><br>So far I have found heimdal and libsqlite packages.<br><br>I feel that this is an unintended license change due to the addition of the<
    license description for debian/*.<br><br>Many projects are applying GPL2+ to debian/*, is there any recommendation?<br>Personally, I think there are fewer unintended accidents if LGPL is applied. <br><br>Package maintainers are encouraged to consider
    this...!<br><br></div>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Paul Wise@21:1/5 to All on Fri Dec 2 09:30:03 2022
    On Fri, 2022-12-02 at 15:59 +0900, 野崎耕平 wrote:

    In researching the licenses of the dependent libraries of the programs I created,
    I noticed that some packages could be non-GPL library become GPL library by patch.

    Generally Debian encourages maintainers to license their packaging
    under the same license as upstream, so we can contribute back.
    This applies to both GPL projects and non-GPL projects.

    So far I have found heimdal and libsqlite packages.

    It might be a good idea to try and contact the patch authors for these
    to ask them to relicense their patches and submit them upstream.

    I feel that this is an unintended license change due to the addition of the license description for debian/*.

    Agreed.

    * The original project is not GPL
    * There is a mention in the copyright that debian/* is GPL
    * Patches to the library source code exist under debian/patches

    This license mismatch issue should apply to all licenses not just the
    GPL. A good way to detect future instances of this issue and report
    them to package maintainers would be if the lintian tool were to
    automatically check for it. Please file a bug report against lintian
    asking for license mismatch detection to be implemented.

    https://www.debian.org/Bugs/Reporting

    --
    bye,
    pabs

    https://wiki.debian.org/PaulWise

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEYQsotVz8/kXqG1Y7MRa6Xp/6aaMFAmOJto8ACgkQMRa6Xp/6 aaOODw/7BD8ib07c/T/i7AdPtTFCtIU4pbaZ1lLbbGbY5NfaVUrL/NA6MiK7y4tf 1UkbOZk+QscZUXrSK7sXpp+O9IPJbpqTqVmnkvao4YRW1Q6HdUjB+UVdWqJI0eXy i/OuhYLwORBQqMgK+coMnaqHMTDt1aPyWGyz07vhf/mXv9PNjX9d1M7K8Q2su3dH 5oWZSRTAwbFHb0pJClpLcpat3MfpbGlbM8jsWMer7UhugND6yT3Ueirp/QVWYgUR UqACSqXfGGj58TLXe5NYpTGbJItzPNjAIYZ9PS8il1aymTUo7u69nBkJ7KxouHWF bs4WXMoCaa6NB3gYBK7DdnLvCQLZcXUBegvBq3ZRaDFNjzT86ZoggpO1HTbgU3gG jcD3YCen1JrqRWwuqyEd/bTYtTjHRpAU9USEi6uXQhlrE/wS/kwPI6EykUVkWFWI AWGr5wFSPA8uwPasnswTszcqCgKS0/pzPf60br4ljeK1DGAqtMMMgPZs/FEPbsVi 1l2VqHqs0zfK3CLgomtb1PxHLe5kdiVVMmW6xN3PlqoNnTK1q8hJtiotXkgFoCvW V3LRCATLERiLHVBTcAaTV2uU1O+TrsuAAxh/j+ErEy359tnpc+Lzm+ev0W3HGolI U5OIJxXzzd8ewVhQslhF2M6l+l8CxK57Aq8aENR5NeXXBdMQY2Y=
    =3Lgl
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From =?UTF-8?B?6YeO5bSO6ICV5bmz?=@21:1/5 to All on Mon Dec 5 06:50:01 2022
    Thank you for your advice!

    It might be a good idea to try and contact the patch authors for these
    to ask them to relicense their patches and submit them upstream.

    A good way to detect future instances of this issue and report
    them to package maintainers would be if the lintian tool were to
    automatically check for it. Please file a bug report against lintian
    asking for license mismatch detection to be implemented.

    I will try to try about these.
    Thank you again.

    2022年12月2日(金) 17:26 Paul Wise <[email protected]>:

    On Fri, 2022-12-02 at 15:59 +0900, 野崎耕平 wrote:

    In researching the licenses of the dependent libraries of the programs I
    created,
    I noticed that some packages could be non-GPL library become GPL library
    by patch.

    Generally Debian encourages maintainers to license their packaging
    under the same license as upstream, so we can contribute back.
    This applies to both GPL projects and non-GPL projects.

    So far I have found heimdal and libsqlite packages.

    It might be a good idea to try and contact the patch authors for these
    to ask them to relicense their patches and submit them upstream.

    I feel that this is an unintended license change due to the addition of
    the
    license description for debian/*.

    Agreed.

    * The original project is not GPL
    * There is a mention in the copyright that debian/* is GPL
    * Patches to the library source code exist under debian/patches

    This license mismatch issue should apply to all licenses not just the
    GPL. A good way to detect future instances of this issue and report
    them to package maintainers would be if the lintian tool were to automatically check for it. Please file a bug report against lintian
    asking for license mismatch detection to be implemented.

    https://www.debian.org/Bugs/Reporting

    --
    bye,
    pabs

    https://wiki.debian.org/PaulWise


    <div dir="ltr">Thank you for your advice!<br><br>&gt; It might be a good idea to try and contact the patch authors for these<br>to ask them to relicense their patches and submit them upstream.<div><br>&gt;  A good way to detect future instances of this
    issue and report<br>them to package maintainers would be if the lintian tool were to<br>automatically check for it. Please file a bug report against lintian<br>asking for license mismatch detection to be implemented.<br><br>I will try to try about these.<
    Thank you again.</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">2022年12月2日(金) 17:26 Paul Wise &lt;<a href="mailto:[email protected]">[email protected]</a>&gt;:<br></div><blockquote class="gmail_quote" style="margin:0px
    0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">On Fri, 2022-12-02 at 15:59 +0900, 野崎耕平 wrote:<br>

    &gt; In researching the licenses of the dependent libraries of the programs I created,<br>
    &gt; I noticed that some packages could be non-GPL library become GPL library by patch.<br>

    Generally Debian encourages maintainers to license their packaging<br>
    under the same license as upstream, so we can contribute back.<br>
    This applies to both GPL projects and non-GPL projects.<br>

    &gt; So far I have found heimdal and libsqlite packages.<br>

    It might be a good idea to try and contact the patch authors for these<br>
    to ask them to relicense their patches and submit them upstream.<br>

    &gt; I feel that this is an unintended license change due to the addition of the<br>
    &gt; license description for debian/*.<br>

    Agreed.<br>

    &gt; * The original project is not GPL<br>
    &gt; * There is a mention in the copyright that debian/* is GPL<br>
    &gt; * Patches to the library source code exist under debian/patches<br>

    This license mismatch issue should apply to all licenses not just the<br>
    GPL. A good way to detect future instances of this issue and report<br>
    them to package maintainers would be if the lintian tool were to<br> automatically check for it. Please file a bug report against lintian<br>
    asking for license mismatch detection to be implemented. <br>

    <a href="https://www.debian.org/Bugs/Reporting" rel="noreferrer" target="_blank">https://www.debian.org/Bugs/Reporting</a><br>

    -- <br>
    bye,<br>
    pabs<br>

    <a href="https://wiki.debian.org/PaulWise" rel="noreferrer" target="_blank">https://wiki.debian.org/PaulWise</a><br>
    </blockquote></div>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)