Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67;
Date:   Wed, 23 Jan 2019 09:50:00 +0100
From:   Domenico Andreoli <domenico.andreoli@linux.com>
To:     Ben Finney <bignose@debian.org>
Cc:     Nadia Yvette Chambers <nyc@holomorphy.com>,
        Arnaldo Carvalho de Melo <acme@redhat.com>,
        919356@bugs.debian.org, debian-legal@lists.debian.org,
        linux-kernel@vger.kernel.org
Subject: Re: Licensing of include/linux/hash.h
Message-ID: <20190123085000.fp7lhtjxcyzw3m4x@dumbo>
References: <20190115170017.5gxarqxzfezgr5ld@dumbo>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
        protocol="application/pgp-signature"; boundary="y6pzhqfh5wkjxynx"
Content-Disposition: inline
In-Reply-To: <20190115170017.5gxarqxzfezgr5ld@dumbo>
User-Agent: NeoMutt/20170113 (1.7.2)
Sender: linux-kernel-owner@vger.kernel.org
Precedence: bulk


--y6pzhqfh5wkjxynx
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Ben Finney <bignose@debian.org> writes:
> Domenico Andreoli <cavok@debian.org> writes:
>=20
> >   the situation of dwarves-dfsg improved a lot over the weekend
>=20
> That's good to hear. What is the event you're referring to? Can you give
> a URL to something that describes this change?

Upstream (in CC) reacted to my request of clarification and patches
have been applied upstream and on Salsa. See bug 919356 [0] (please
keep in CC).

> > the only knot left is now the license of hash.h
> >
> > This file is also present in the kernel [0] with an updated copyright
> > but still without license.
>=20
> The file you show (in the Linux code base) seems likely to have an
> equivalent implementation under a different license, from some other
> code base.

This will require research and work unlikely to be done before Buster
release. Are we going to drop this package for now?

> > I received a private email from somebody in the kernel community who
> > already tried to contact Nadia in the past but did not get any reply.
>=20
> Thank you also for contacting the Linux developers forum to ask
> <URL:https://www.mail-archive.com/linux-kernel@vger.kernel.org/msg1900588=
=2Ehtml>.

(also in CC now)

> > I think that pushing it to non-free is formally the right thing but I
> > actually feel it's not the right thing.
>=20
> To know that work (that file) is free software, we need a clear grant of
> some specific license, for that work.
>=20
> If the work is not free, it would be incorrect to have the work in Debian.

Is it possible that for the kernel it is instead correct because it is,
as whole, covered by its COPYING?

> Alternatives, for complying with the Debian Free Software Guidelines with
> this package, include:
>=20
> * Find a credible grant of license under some GPL-compatible free
>   license to that exact file. Document that explicit grant in the Debian
>   package. This demonstrates the work is DFSG-free.
>=20
> * Convince =E2=80=98dwarves-dfsg=E2=80=99 upstream to replace that file w=
ith a different
>   implementation (I don't know whether such an implementation exists)
>   under a license compatible with the same version of GNU GPL. Document
>   that explicit grant in the Debian package. This demonstrates the
>   modified work is DFSG-free.

Arnaldo, what priority would you give to this task?

>=20
> * Replace that file in Debian only, with a different implementation as
>   above. Document that explicit grant in the Debian package. This
>   demonstrates the modified Debian package is DFSG-free.
>=20
> * Move the work to the =E2=80=98non-free=E2=80=99 area.
>=20
> * Remove the work altogether.
>=20
> Those are in descending order of (my recommended) preference.

Thanks,
Domenico

[0] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=3D919356

--=20
3B10 0CA1 8674 ACBA B4FE  FCD2 CE5B CF17 9960 DE13

--y6pzhqfh5wkjxynx
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQIzBAABCAAdFiEEqwJ7wH2QqDPtVNX+Tg9k0miCQVoFAlxIKrIACgkQTg9k0miC
QVpJaQ/+OmlHW6Y4OL2kw2mBvO9/p4VZaVfjM/7+eaf5AJ5IRWkoGpjexJGyCGMz
8TaiFu1yaGuhvfYSM9g1NcxxGEK4nNMgp+MZsjSX5zRBH57ojknuvZwHsjRS3ofw
lFWMG8gGaunrNNuC7jHKRc68d9J3/PLVwXbYyXFHmRt3Q58/ec8gfavk6u+mrN6h
yyTqmec1bHLSCCofuQFFnlBJQXhAowu8FaqmtkuVFimeye3Epy6qHuh5SI408pPa
4LyElnk6VzdMb70AK1WAjDjMFtziXoZQzQTgyIur5T4oBtg0qVTtxblXh7GU0cjX
0DVqBrjpN4kemqhtZ+qNOq4Yn0xtOaqPdjpAt3h+lGTuQaJskBExuMlHEOh/ZBJo
cUctYon4QgJXLhbTct5RtI4T+Vz0hhRawVCG3h3BcBi6SvIrHGLipxW1TeopIuDG
jGg3ifudpBeZ1JEy0J1jiZucl5Sy/7n/0AsVDCVSdFq84RjPLka//CW+yWBcMMpJ
xJv0iNCbJA6JZuUISc8mBKQhkI6Z7U3DBh60DZcXqmqqbzhNpCpQUWAFuWZRuoEM
G8LcrGOFlc3TdZkLPTIHIzaXix6ic9X7ZT//pmbTAufeGWp2NOJALOVfDG1r9rv+
fKWI0MfH4OLTNHTrWGcbehGOh8+GaP0cyUv/O0j3sI0A17HNQzM=
=iy41
-----END PGP SIGNATURE-----

--y6pzhqfh5wkjxynx--