Package: bluez-bcm203x
Version: 2.10-4
Severity: serious

[Previously discussed via private mail with maintainer.  I'm going ahead
and reporting this to have it recorded somewhere.]

 From the description of bluez-bcm203x:
> Firmware loader for Broadcom 203x based Bluetooth devices
> This package contains a firmware loader for users of the 2.4 Linux
> kernel and Broadcom 203x based Bluetooth devices.

 From debian/copyright of the non-free bluez-firmware package, which
contains the firmware this package can load:
> The BlueZ project has permission from Broadcom Corporation to
> distribute this firmware in conjunction with the BlueZ GPLd
> tools, available in Debian as bluez-utils, as long as the notice
> contained in /usr/share/doc/bluez-firmware/BCM-LEGAL.txt accompanies
> the firmware.
>
> This arrangement was made with BlueZ author Max Krasnyansky
> <[EMAIL PROTECTED]>.

This raises many issues:

* Since bluez-bcm203x seems to exist only to load this non-free
firmware, it should have a "Depends: bluez-firmware" rather than
"Suggests: bluez-firmware".

* For the same reason, the bluez-bcm203x package should be moved to contrib.

* The indicated grant of permission to distribute requires that the
distribution be "in conjunction with the BlueZ GPLd tools, available in
Debian as bluez-utils".  Given that non-free isn't part of Debian, it
seems difficult to argue that the bluez-firmware package in non-free is
being distributed "in conjunction with" the blues-utils package in main,
or even a bluez-bcm203x package in contrib.

- Josh Triplett

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to