Yes, I see that could be a valid concern. Is this a sign that poky needs per-package LIC_FILES_CHKSUM variables the same way each package can set different LICENSE values? I would like to continue to use Yocto to collect licenses for compliance reasons, but in this case I am getting an incorrect license file in my image. In my configuration, I am placing "GPLv3" in INCOMPATIBLE_LICENSES. Is there any way to use this information at rootfs time to exclude GPLv3 licenses from being collected? Do you have any recommendations for how I should proceed with collecting accurate licenses in my image?
Thanks for your help, Wes L On Fri, Aug 16, 2019 at 4:50 PM Khem Raj <raj.k...@gmail.com> wrote: > On Fri, Aug 16, 2019 at 12:46 PM Wes Lindauer <wesley.linda...@gmail.com> > wrote: > > > > Although xz has some files that are GPLv3 licensed, none of them get > > packaged up, and therefore none of it ends up in the final rootfs. Since > > there is no GPLv3 code in the final image, we don't want to include it > > when we collect licenses, as that would give the incorrect impression > > that the image contains GPLv3 code. > > We will be distributing this in src packages though. Maybe these files > should be deleted before the build even starts. > > > > Also fixes the endline for getopt.c which had a couple of non-license > > text lines at the bottom. > > --- > > meta/recipes-extended/xz/xz_5.2.4.bb | 3 +-- > > 1 file changed, 1 insertion(+), 2 deletions(-) > > > > diff --git a/meta/recipes-extended/xz/xz_5.2.4.bb > b/meta/recipes-extended/xz/xz_5.2.4.bb > > index 791746e1cf..e6725e5f12 100644 > > --- a/meta/recipes-extended/xz/xz_5.2.4.bb > > +++ b/meta/recipes-extended/xz/xz_5.2.4.bb > > @@ -17,9 +17,8 @@ LICENSE_liblzma = "PD" > > > > LIC_FILES_CHKSUM = "file://COPYING;md5=97d554a32881fee0aa283d96e47cb24a > \ > > > file://COPYING.GPLv2;md5=b234ee4d69f5fce4486a80fdaf4a4263 \ > > - > file://COPYING.GPLv3;md5=d32239bcb673463ab874e80d47fae504 \ > > > file://COPYING.LGPLv2.1;md5=4fbd65380cdd255951079008b364516c \ > > - > file://lib/getopt.c;endline=23;md5=2069b0ee710572c03bb3114e4532cd84 \ > > + > file://lib/getopt.c;endline=21;md5=32575ca1a42c5fa04aac6f08566ddf48 \ > > " > > > > SRC_URI = "http://tukaani.org/xz/xz-${PV}.tar.gz" > > -- > > 2.14.5 > > > > -- > > _______________________________________________ > > Openembedded-core mailing list > > Openembedded-core@lists.openembedded.org > > http://lists.openembedded.org/mailman/listinfo/openembedded-core >
-- _______________________________________________ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core