15.05.2023 20:50, Michael Tokarev wrote:
15.05.2023 19:49, Bastian Germann wrote:
the qemu-system-* binaries depends on libsasl2-2, which is licensed under CMU's BSD-3-Clause-Attribution license and covered by the RSA-MD license.
They have clauses in place, which are known to be incompatible with GPL (as far as I can see the mentioned binaries' license).
I'm not a licensing expert. Here's a personal opinion of one of
the QEMU developers (and note this attribution, not advertising):
<danpb> mjt: mho clause 4 attribution is satisfied by simply always providing
the full corresponding source tarball alongside the binary tarball,
or by including the license file text in the binary dist
<danpb> the attribution clause looks unpleasant, but imho it is defanged by
not giving any specific rules about /how/ you must attribute them
<danpb> the original BSD-4 clause was a serious problem because it specifically
mentioned "All advertising materials mentioning features or use of this
software"
<danpb> IOW, it proscribed a specific rule for how you must attribute
(Just another point of view here).
Also for the RSA-MD license (which has stronger attribution clause), the 4 files
in cyrus-sasl which are covered by it should just be deleted and replaced with
equivalent
implementations which is done by everyone else.
/mjt
