Re: license for eSvn

2004-09-07 Thread Henning Makholm
Scripsit Pierre Chifflier <[EMAIL PROTECTED]>
> On Mon, Sep 06, 2004 at 08:05:24PM +0100, Henning Makholm wrote:

> > > and that this kind of license is already used by other debian
> > > packages

> > Which packages? If that is true, bugs should be filed and packages
> > moved to non-free, preferrably before sarge releases if at all
> > possible.

> lincvs. Which has been accepted a long time ago into main.

Hm, the copyyright file for lincvs appears to be wrong. It says:

| This program is free software; you can redistribute it and/or modify
| it under the terms of the GNU General Public License as published by
| the Free Software Foundation; either version 2, or (at your option)
| any later version.

with no platform restrictions.

However, the file LICENCE in the source tarball contains:

| LinCVS is available under two different licenses:
| 
| If LinCVS is linked against the GPLed version of Qt
| LinCVS is released under the terms of GPL also.
|
| If LinCVS is linked against a nonGPLed version of Qt
| LinCVS is released under the terms of the
| LinCVS License for non-Unix platforms (LLNU)

and the same notice appears in the actual C++ source file I sampled.

This is non-free because it only gives a license for as long as one
links with Qt; if I rewrite the code to work with another toolkit
(even a public-domain one) I find myself with no license for the code
at all. The freedom of the GPL does not survive that kind of
crippling; so the software has no free license. The lincvs author
should be contacted for a license clarification, or, alternatively,
the package should be moved to non-free.

What both authors probably *intend* is to offer a dual license which
lets the user choose arbitrarily between the GPL and another license.

That would automatically imply that the usual *internal* restrictions
prevent the user from linking with a GPL-incompatible library if he
chooses the GPL, and from linking with GPL code if he choses the other
license. The author can of course point this out as guidance for the
user - but he cannot, without losing DFSG-freedom, deny the user the
right to choose the free license even in situations where the author
expects the free license to be useless.

-- 
Henning Makholm  "Punctuation, is? fun!"



Re: updated: Re: license for eSvn

2004-09-07 Thread Henning Makholm
Scripsit Pierre Chifflier <[EMAIL PROTECTED]>

> So the final license is:

> GPL, with an explicit exception allowing linking with any version of
> Qt without having to redistribute sources of Qt. (that is the license
> of psi package)

That seems fine. For DFSG purposes we don't need the explicit
exception, but it doesn't hurt either, of course.

-- 
Henning Makholm "Det er du nok fandens ene om at
 mene. For det ligger i Australien!"



Bug#270461: lincvs: No free license & misleading copyright file

2004-09-07 Thread Henning Makholm
Package: lincvs
Version: 1.3.2-3
Severity: serious

The copyright file for lincvs claims:

| Copyright: (c) 1999-2003 by above named authors.
|
| This program is free software; you can redistribute it and/or modify
| it under the terms of the GNU General Public License as published by
| the Free Software Foundation; either version 2, or (at your option)
| any later version.

However, the copyright notice in the upstream source's LICENSE file reads

| LinCVS is available under two different licenses:
|
| If LinCVS is linked against the GPLed version of Qt 
| LinCVS is released under the terms of GPL also.
|
| If LinCVS is linked against a nonGPLed version of Qt 
| LinCVS is released under the terms of the 
| LinCVS License for non-Unix platforms (LLNU)

This language is also found in most of the actual source files, except
for the files

  src/AnnotateGrepLinesDialog.ui
  src/ccvscommand.h
  src/ccvscommand.cpp
  src/MergeDialog.ui
  src/AnnotateGrepLineDialog.ui
  src/cmainwindow.ui

which contain ordinary GPL notices.

The notice in the LICENSE file specifies a non-free license. GPL is
usually free, but when, as here, it is applied only under the
condition that one links with (a certain version of Qt) it is not
free. The restriction means that I cannot take the lincvs code nd
modify it such that it does not use Qt anymore - I would find myself
without any applicable license at all.

Furthermore, such a restricted GPL grant is incompatible with the raw
GPL-ness of src/AnnotateGrepLinesDialog.ui et al.


What the upstream author probably *meant* is something along the lines
of

   This program is free software; you can redistribute it and/or modify
   it under the terms of the GNU General Public License as published by
   the Free Software Foundation; either version 2 or (at your option)
   any later version; or (at your option) under the terms of the
   LinCVS License for non-Unix platforms (LLNU) which is reproduced
   below.

   The two license options give you slightly different rights under
   slightly different conditions; you can choose the one that suits
   your purpose best.

   If you redistribute a modified version of LinCVS, you have the
   option of using either of the license options, or to preserve
   the dual licensing. Beware that if you choose to redistribute
   under only one of the license options, your recipients will not be
   able to link with either the free or the commercial editions of Qt.

This would be DFSG free, but what the authors actually *did* is not.


To solve this problem, the Debian maintainer should contact the
upstream authors and ask them whether they would agree to an ordinary
dual licensing scheme like the one sketched above. If they do, this
bug report can be closed once evidence of their agreement reaches the
copyright file. If an agreement with the authors cannot be reached,
the package will have to move to non-free.

-- 
Henning Makholm  "Underlige Ugle vågner midt om natten."



Re: GPL-licensed packages with depend-chain to OpenSSL

2004-09-07 Thread Joel Baker
On Sun, Sep 05, 2004 at 01:05:27PM +0100, Andrew Suffield wrote:
> On Sat, Sep 04, 2004 at 10:03:31PM -0700, Ken Arromdee wrote:
> 
> > and of course that any document
> > written in Microsoft Word is derived from Word.
> 
> I can use a word document without a copy of word, these days. There
> are at least half a dozen other things that can work with them.

Perhaps I am misunderstanding, but by this argument, wouldn't the fact that
"can link against libcurl with GNU TLS, libcurl with OpenSSL, or libcurl
with no SSL at all" qualify it as mere aggregation - if the dividing point
is that multiple implementations, at least some of which are Free, can be
used with it?

Shades of libreadline
-- 
Joel Baker <[EMAIL PROTECTED]>,''`.
Debian GNU/kNetBSD(i386) porter  : :' :
 `. `'
http://nienna.lightbearer.com/ `-


signature.asc
Description: Digital signature


Re: GPL-licensed packages with depend-chain to OpenSSL

2004-09-07 Thread Andrew Suffield
On Tue, Sep 07, 2004 at 05:34:29PM +, Joel Baker wrote:
> On Sun, Sep 05, 2004 at 01:05:27PM +0100, Andrew Suffield wrote:
> > On Sat, Sep 04, 2004 at 10:03:31PM -0700, Ken Arromdee wrote:
> > 
> > > and of course that any document
> > > written in Microsoft Word is derived from Word.
> > 
> > I can use a word document without a copy of word, these days. There
> > are at least half a dozen other things that can work with them.
> 
> Perhaps I am misunderstanding, but by this argument, wouldn't the fact that
> "can link against libcurl with GNU TLS, libcurl with OpenSSL, or libcurl
> with no SSL at all" qualify it as mere aggregation - if the dividing point
> is that multiple implementations, at least some of which are Free, can be
> used with it?

Maybe. You have implicitly introduced the notion that these three
variations on libcurl are distinct, and I'm just not sure about
that. This transitive option stuff is murky.

-- 
  .''`.  ** Debian GNU/Linux ** | Andrew Suffield
 : :' :  http://www.debian.org/ |
 `. `'  |
   `- -><-  |


signature.asc
Description: Digital signature


Re: Bug#270461: lincvs: No free license & misleading copyright file

2004-09-07 Thread Glenn Maynard
On Tue, Sep 07, 2004 at 03:04:09PM +0100, Henning Makholm wrote:
> The notice in the LICENSE file specifies a non-free license. GPL is
> usually free, but when, as here, it is applied only under the
> condition that one links with (a certain version of Qt) it is not
> free. The restriction means that I cannot take the lincvs code nd

I think this is the wrong way of putting it.  This is not a case of a
"non-free application of the GPL".  This software is not under the GPL
at all; it's under a different, non-free, GPL-incompatible license that's
easily confused with the GPL.

> Furthermore, such a restricted GPL grant is incompatible with the raw
> GPL-ness of src/AnnotateGrepLinesDialog.ui et al.

Also, dual-licensing the rest would be relatively useless without dual-
licensing these files, too, unless these files are easily removed.

-- 
Glenn Maynard



Re: GPL-licensed packages with depend-chain to OpenSSL

2004-09-07 Thread Joel Baker
On Tue, Sep 07, 2004 at 07:57:06PM +0100, Andrew Suffield wrote:
> On Tue, Sep 07, 2004 at 05:34:29PM +, Joel Baker wrote:
> > On Sun, Sep 05, 2004 at 01:05:27PM +0100, Andrew Suffield wrote:
> > > On Sat, Sep 04, 2004 at 10:03:31PM -0700, Ken Arromdee wrote:
> > > 
> > > > and of course that any document
> > > > written in Microsoft Word is derived from Word.
> > > 
> > > I can use a word document without a copy of word, these days. There
> > > are at least half a dozen other things that can work with them.
> > 
> > Perhaps I am misunderstanding, but by this argument, wouldn't the fact that
> > "can link against libcurl with GNU TLS, libcurl with OpenSSL, or libcurl
> > with no SSL at all" qualify it as mere aggregation - if the dividing point
> > is that multiple implementations, at least some of which are Free, can be
> > used with it?
> 
> Maybe. You have implicitly introduced the notion that these three
> variations on libcurl are distinct, and I'm just not sure about
> that. This transitive option stuff is murky.

Perhaps; IMO, a transitive API (that is, an API which provides a thin
veneer over other APIs, such as Curl's SSL API) falls under one of two
cases:

1) It is, itself, an API barrier beyond which the program cannot "see",
   and which means the license of the transitive API governs whether it
   can be used with GPL code.

   or

2) It "passes through" to the API which *it* calls, and the licensing of
   any / all implementations of that API distributed come into play.

There are some "smell of the wind" tests one could propose to decide
between case 1 and case 2, the foremost I can think of having to do with
how similar the APIs are (that is, how "thick" the veneer is - panelling,
or a two foot wall?), but for the specific instance at hand, it isn't
actually necessary to decide, AFAICT. Specifically:

In case 1, Curl's license governs, and as far as I understand, this
isn't a problem at all (or the issue wouldn't be so murky).

In case 2, we degenerate into a situation identical to the readline library
situation - multiple implementations of the API exist which can fufill the
API requirements for dynamic linking. A quick review of the topic from
past d-l posts, courtesy of Google, makes my head hurt a lot more than it
did before I began, but the best summary I can find is that "derived work"
status may be invalidated if programming to a (non-copyrightable) API,
rather than to a specific implementation (modulo Debian packaging choices
such as whether it Depends, Recommends, or Suggests packages with various
licenses).
-- 
Joel Baker <[EMAIL PROTECTED]>,''`.
Debian GNU/kNetBSD(i386) porter  : :' :
 `. `'
http://nienna.lightbearer.com/ `-


signature.asc
Description: Digital signature