-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Thanks Xose, for digging this information. But shouldn't this information go into respective source files? Recently, at Debconf, I came aware of Fossology [1]. It is a compliance tool for license, copyright and export control scans. I have spawned off a job [2] and am curious of the result. But looks like their server may be having a problem at the moment. But it is standard practise in most Free Software projects to define the licensing proper. And for a project with mixed licenses, it'd be best to have individual source files mention their license. [1] https://www.fossology.org/ [2] http://52.26.97.143/repo/?mod=showjobs On Thu, 2016-07-28 at 00:19 +0200, Xose Vazquez Perez wrote: > On 07/27/2016 12:42 PM, Ritesh Raj Sarraf wrote: > > > > > I just ran some compliance tools on multipath and the results weren't very > > appealing in regard to licensing and copyright information. > > > > The standard COPYING file mentions LGPL v2. > > On the other hand, the majority of the source code has no license mentioned > > in > > its header. Some that do have, mention it as GPLv2, and some as GPLv2+ > > "No copyright" or "UNKNOWN" files should be covered by COPYING licence(LGPL > v2). > Except: > > kpartx/ > It comes from partx(util-linux), and these files are under "GPL v2" or > "GPL v2 or later". Independent binary. > > > libmultipath/prioritizers/ontap.c > It's "GPL v2". But it's a plugin. ??? > > > libmultipath/checkers/cciss_tur.c > Source says "GPL v2 or later", and: > /* > * This program originally derived from and inspired by > * Christophe Varoqui's tur.c, part of libchecker. > */ > At libmultipath/checkers/tur.c there is no licence, but it's derived from > src/sg_turs.c > from sg3_utils. And this one is under "GPL v2 or later". But it's a plugin. > ??? > > > libmultipath/memory.c > libmultipath/memory.h > libmultipath/parser.c > libmultipath/parser.h > libmultipath/vector.c > libmultipath/vector.h > These comes from keepalived, and they are under "GPL v2 or later". > > > libmultipath/version.h: > "GPL v2 or later". > > > libmultipath/file.c > libmultipath/alias.c > Source says: > /* > * significant parts of this file were taken from iscsi-bindings.c of the > * linux-iscsi project. > And they are under "GPL v2 or later". > > > libmultipath/uevent.c > libmultipath/sysfs.c > These come from udev, and they are "GPL v2". > > > GPL code can not be mixed with LGPL code. So I guess libmultipath/ files are > "GPL v2" ??? > > > multipath/main.c > Under "GPL v2 or later". It's linked with libmultipath.so and libmpathcmd.so. - -- Ritesh Raj Sarraf | http://people.debian.org/~rrs Debian - The Universal Operating System -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJXmjiBAAoJEKY6WKPy4XVpSa0QAIufEm7ECOOBRGGEUTuL6GH5 v8GTDMat4+uCDQ9JfONDSlft6h69aQt7T783dAHsEW52eVzLRxiMv3/49t5lmp8V j3yfNq0KEc+MJ2Hx3QsVI1ZsJsmkLZc0hBgBKRf7hMO4upMxSJN2aV0c7w9gZrDE fxrHUd3rFesaQv0NY5ZFGfOWqffxksQxlhrhrg3KxaDbdZaeb3D+5TjtAqZcr8No OiaVTdle9mssP+bPNL4Ok7y+RZNZ/3OdbxpbSwLD+2ZqXabozdi7Mfe7gmdNgIXT 3cIB6/Umy+uMw4Yijbq7YsWb+EWmMI1CfMDa/DBB4NBo5O7kVQ5+07/shDR0+sej k6Y//reLj4hGmjzh9X6mRqbbx/MpMe23iFQocXOT6VvjQXtnop12FqNdpM78Bufw b3L1dHn2OogQxv9rce6Vfdp2mIRyQox6q9dTBoLBbAPkEjUnVj8MECjHdGKrWl6Y 3bg5udGhNOjkNrHTj+6DCOEXKccLPXnJiuJbidjIdR1jpjVa6klqVZaOL6u+Rpi+ up4YWeUWE7uh8uqY0k6cA2Bn+CIXScWJYQkmUHSdEVrQv0lqYpsSsmwXpccc5daB sVNH3Q6gxGJGEvNF4Fggk0+m9XBxnTL0axX3fGqVrP5U9ftK6kpQuLTIRAWstr3V qGTg4tewUCl8oTOfdN9J =yhyM -----END PGP SIGNATURE----- -- dm-devel mailing list dm-devel@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/dm-devel
