Package: povray
Version: 1:3.7.0~beta29-1
Severity: serious
Justification: Policy 2.3


Today I found that POV-Ray 3.7 is packaged in experimental:
http://packages.debian.org/experimental/povray

It's also patched to disable the beta expiration:
http://patch-tracker.debian.org/patch/series/view/povray/1:3.7.0~beta29-1/80_beta.diff

This seems to violate the beta license in *every possible way*.

POV-Ray 3.7 betas are released under the normal POV-Ray license (which is
non-free according to DFSG) *plus four significant restrictions* not present
in final releases:

 * NOTICE
 *
 * This file is part of a BETA-TEST version of POV-Ray version 3.7. It is not
 * final code. Use of this source file is governed by both the standard POV-Ray
 * licences referred to in the copyright header block above this notice, and the
 * following additional restrictions numbered 1 through 4 below:
 *
 *   1. This source file may not be re-distributed without the written 
permission
 *      of Persistence of Vision Raytracer Pty. Ltd.
 *
 *   2. This notice may not be altered or removed.
 *   
 *   3. Binaries generated from this source file by individuals for their own
 *      personal use may not be re-distributed without the written permission
 *      of Persistence of Vision Raytracer Pty. Ltd. Such personal-use binaries
 *      are not required to have a timeout, and thus permission is granted in
 *      these circumstances only to disable the timeout code contained within
 *      the beta software.
 *   
 *   4. Binaries generated from this source file for use within an 
organizational
 *      unit (such as, but not limited to, a company or university) may not be
 *      distributed beyond the local organizational unit in which they were 
made,
 *      unless written permission is obtained from Persistence of Vision 
Raytracer
 *      Pty. Ltd. Additionally, the timeout code implemented within the beta may
 *      not be disabled or otherwise bypassed in any manner.

(taken from one of the source files from the upstream source tarball)

The Debian package is redistributing entire source code of POV-Ray 3.7, 
available
through packages.debian.org website and "apt-get source -texperimental povray".
This violates clause 1.

The extra license restrictions for 3.7 betas are not mentioned in any file
in /usr/share/doc/povray, which *I think* may violate clause 2.

The Debian package has a patch disabling the beta timeout code, which is
only allowed for personal use (according to clause 3), not for wider
distribution.

In addition, I don't think a Linux distribution counts as an "organizational
unit" as mentioned in clause 4; therefore *Debian isn't allowed to
redistribute 3.7 betas at all*.

(If you don't agree with my reading of "organizational unit", the rest still
stands, such that 3.7~beta on debian would have to be binary-only and
keeping the expiration code unmodified.)

As I was told in debian-legal: If the maintainer for the povray package
requested and got a written permission from Persistence of Vision Raytracer
Pty. Ltd to avoid any of the four restrictions, it has to be mentioned in
the copyright file. Otherwise, the package should be removed from Debian
until the final release of 3.7 is available under the usual terms of the
POV-Ray license.

-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.30-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=es_AR.UTF-8, LC_CTYPE=es_AR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to