https://bugzilla.redhat.com/show_bug.cgi?id=2431593



--- Comment #13 from Yaakov Selkowitz <[email protected]> ---
(In reply to Sergio Arroutbi from comment #12)
> https://github.com/latchset/clevis-pin-trustee/tree/main/LICENSES

CC0-1.0 is actually problematic for *code*, but inspection of the source tree
shows that it is only used in the build infrastructure (Cargo.toml, test.sh,
etc.).  

Per
https://docs.fedoraproject.org/en-US/legal/license-field/#_source_package_files_not_included_in_binary_rpm
, as these files do not end up in the binary RPMs, their license should be
omitted.  Therefore, CC0-1.0 should not be in the License tag nor installed by
%license in %files.

> > %cargo_summary doesn't belong in %install, and there is no need for two
> > calls.  The existing call in %build should be CHANGED per my previous
> > comments.  Also, both %cargo_license_summary and %cargo_license should
> > FOLLOW %cargo_build, not precede it.
> 
> I have no %cargo_summary in my .spec file. Do you mean
> %cargo_license_summary?
> In that case, it is only being called once.

Sorry, I meant %cargo_license, there should be only call in %build, bracketed
and redirected.

> +License:        BSD-3-Clause AND (MIT OR Apache-2.0) AND Unicode-DFS-2016
> AND (0BSD OR MIT OR Apache-2.0) AND Apache-2.0 AND (Apache-2.0 OR BSL-1.0)
> AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND MIT AND (MIT OR Zlib OR
> Apache-2.0) AND Unicode-3.0 AND (Unlicense OR MIT) AND CC0-1.0

Besides dropping CC0-1.0 as mentioned above, the "AND (MIT OR Apache-2.0)"
clause isn't needed for the same reason "(Apache-2.0 OR MIT)" isn't -- both
Apache-2.0 and MIT are already AND'ed in by themselves.


-- 
You are receiving this mail because:
You are always notified about changes to this product and component
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2431593

Report this comment as SPAM: 
https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-spam&short_desc=Report%20of%20Bug%202431593%23c13

-- 
_______________________________________________
package-review mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://forge.fedoraproject.org/infra/tickets/issues/new

Reply via email to