Dear list members,
I would like to ask regarding licenses for the W3AF (webapplication audit tool) and its suitability for Fedora.
I would like to package w3af for Fedora. this software is python application bundled with several 3rd party python libraries.
It is possible to use system libraries for some of the dependencies, but for some of those it will not be trivial to separate them (that is probably reason why debian package bundles them as well).
1) How is it in such situation with compatibility betwen GPL LGPL other licenses if the software is
distributed de-facto in a source form ? Is it problem to bundle libraries ?
2) How the license tag in the package should look like?
Is something like this suitable for the situation ?
License: GPLv2 and ( LGPLv3 and LGPLv2 and GPLv2+ and GPLv3 and CC-BY-SA )
https://bugzilla.redhat.com/show_bug.cgi?id=579428
Attached is the list of bundled libraries which I was able to identify in the upstream tarball.
Thank you for advice.
Michal Ambroz
W3AF tarball package was downloaded from http://w3af.sourceforge.net/
Copyright: 2007-2010 Andres Riancho
It contains code/modules from these other projects:
jsonpy
Files: extlib/jsonpy/*
Copyright: patrickdlogan@xxxxxxxxxxxxxxxxx
HomePage: http://sourceforge.net/projects/json-py/
License: LGPLv2.1
python-ntlm
Files: core/data/url/handlers/HTTPNtlmAuthHandler.py extlib/ntlm
Copyright: Matthijs.Mullender
HomePage: http://code.google.com/p/python-ntlm/
License: LGPLv3
cluster
Files: extlib/cluster/*
Copyright: Michel Albert
HomePage: http://python-cluster.sourceforge.net/
License: LGPLv2.1
halberd
Files: plugins/discovery/oHalberd/*
Copyright: 2008 Juan M. Bello Rivas
HomePage: http://halberd.superadditive.com/
License: GPLv2
hmap
Files: plugins/discovery/oHmap/*
Copyright: 2003 Dustin Lee
HomePage: http://ujeni.murkyroc.com/hmap/
License: GPLv2
meld
Files: core/ui/gtkUi/comparator/diffutil.py
Copyright: 2002-2006 Stephen Kennedy <stevek@xxxxxxxxx>
HomePage: http://meld.sourceforge.net/
License: GPLv2
Natural Language Toolkit (nltk)
Files: extlib/nltk/*
Copyright: 2001-2009 NLTK Project
HomePage: http://www.nltk.org
License: GPLv2+
pluginEditor
Files: core/ui/gtkUi/pluginEditor.py
Copyright: 1998 James Henstridge, 2004 John Finlay
License: GPLv2
sqlmap
Files: plugins/attack/db/*
Copyright: 2008 Daniele Bellucci
2008 Bernardo Damele
HomePage: http://sqlmap.sourceforge.net/
License: GPLv2
xdot.py
Files: extlib/xdot/xdot.py
Copyright: 2008 Jose.R.Fonseca
HomePage: http://code.google.com/p/jrfonseca/wiki/XDot
License: GPLv3
xml-data-file-of-online-valid-phishes-from-phishtank
Files: plugins/discovery/phishtank/index.xml
Copyright: 2006 OpenDNS, LLC
HomePage: http://www.phishtank.com/blog/2006/10/17/xml-data-file-of-online-valid-phishes-from-phishtank/
License: Creative Commons Attribution-ShareAlike 2.5 License
_______________________________________________
legal mailing list
legal@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/legal
