Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Poorly specified licensing for some lenses #816

Open
berrange opened this issue Sep 15, 2023 · 2 comments
Open

Poorly specified licensing for some lenses #816

berrange opened this issue Sep 15, 2023 · 2 comments

Comments

@berrange
Copy link

I'm auditing the licensing of Augeas for the purposes of Fedora's SPDX license record.

Most of the lenses just refer to being under the same license as the rest of Augeas, which is great. I came across a few lenses whose license is ill defined though:

  • activemq_conf.aug
  • activemq_xml.aug
  • jettyrealm.aug
  • jmxaccess.aug
  • jmxpassword.aug

These all merely say "LGPL" without giving any version at all, so could be 2.0 or 2.1 with or without "or later". A charitable interpretation would be to assume the same terms as Augeas itself, which would be and thus LGPL 2.1 or later. It would be better if these were explicit like most other lens which say "This file is licenced under the LGPL v2+, like the rest of Augeas."

  • dhcpd.aug
  • ssh.aug

These all merely say "GPL" without giving any version at all, so could have been intended to be 1.0, 2.0, 3.0, with or without "or later". In absence of any data I would probably have to assume the oldest version 1.0, but really the original authors need to confirm this to make their intention explicit. Possibly "GPL" was even an accident and it was simply meant to be LGPL 2.1 or later, like the rest of Augeas.

  • mdadm_conf.aug

Just says "LGPL v2+", no distinction of 2.0 or 2.1, but it is probably fairly safe to assume the same as augeas itself as LGPL 2.1 or later

  • syslog.aug

Just says "BSD". This one is a big problem, as there are soo many variants of BSD license available.

In summary, the three lenses saying "GPL" and "BSD" are the significant problems here as there are so many possible variants in both cases that it is hard to assume intent. The original authors need contacting to clarify IMHO.

@igalic
Copy link

igalic commented Sep 15, 2023

given that syslog.aug is authored by mat@FreeBSD.org, maybe we can just assume FreeBSD's default BSD-2.


cc @mat813

@mat813
Copy link
Contributor

mat813 commented Sep 15, 2023

Yeah, bsd-2 feels right.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants