Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. https://bugzilla.redhat.com/show_bug.cgi?id=529374 --- Comment #4 from Peter Robinson <pbrobinson@xxxxxxxxx> 2009-11-25 13:07:15 EDT --- > > The README file states that it uses the LGPLv2.1 license and doesn't state 'or > > later versions' hence the reason the + wasn't added. > > I believe this is correct. > The README file? Please look in the COPYING. This is the file to figure out the > correct license. The COPYING file just contain the LGPL2.1 and doesn't say anything about using a later version of the license. Sometimes you get the license text in the COPYING file and a note in the README on how to apply the license. IE LGPLv2.1 only or LGPLv2.1 or any later version at the users choice. Hence my point. > > # Tarfile created using git > > # git clone git://git.dronelabs.com/ethos > > # git archive --format=tar --prefix=%{name}-%{version}/ %{git_version} | bzip2 > > > %{name}-%{version}.tar.bz2 > > %define git_version 9d3aae9 > > %define tarfile %{name}-%{version}.tar.bz2 > This part is okay, but not what she meaned. > Josephine, if you create this tarball you get another md5sum. But this is > normal. Nope. That's incorrect. you should be able to recreate the tar ball with the same md5sum by using the procedure. That's the whole point of the md5sum.... to ensure the source code isn't modified from upstream official code/release. -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug. _______________________________________________ Fedora-package-review mailing list Fedora-package-review@xxxxxxxxxx http://www.redhat.com/mailman/listinfo/fedora-package-review