|
Canceled Event: SPDX Legal Workstream Call 11ET/10CT/8PT @ Wed Jul 13 8am - 9am (spdx@fossbazaar.org)
Esteban Rockett <mgia3940@...>
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
[Update] SPDX Legal Workstream Call 11ET/10CT/8PT
mgia3940@motorola.com <mgia3940@...>
All:
The meeting with the "un-named concerned parties" regarding the "Author" and "Reviewer" fields (in the SPDX Specification) has not occurred yet (due to logistics). Since today's meeting was to discuss feedback from the above-mentioned meeting with the "un-named concerned parties", I am cancelling today's call to respect everyone' time. We will reconvene in 2 weeks, at the normal time and slot. Many thanks, Rockett |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Re: Ninka, and SPDX On the linux kernel and BSD licenses
dmg
On Tue, Jul 12, 2011 at 6:43 AM, Kate Stewart
<kate.stewart@...> wrote: One more:THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. Neither the names of the copyright holders nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. vs Neither the name of the <ORGANIZATION> nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. -- --dmg --- Daniel M. German http://turingmachine.org |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Re: Ninka, and SPDX On the linux kernel and BSD licenses
dmg
On Tue, Jul 12, 2011 at 6:43 AM, Kate Stewart
<kate.stewart@...> wrote: Hi Daniel,I am not in that mailing list. It would be of great help if somebody help me with the analysis of the non-matching license files, while I concentrate on adding SPDX licenses to ninka. --dmg
-- --dmg --- Daniel M. German http://turingmachine.org |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Re: Ninka, and SPDX On the linux kernel and BSD licenses
Kim Weins
Daniel
These seem like examples of the things we may want to "templatize" in the standard licenses. Those efforts have been delayed behind other items. The legal team can speak to these specific issues of whether we would consider them equivalent. Kim On Tue 7/12/11 4:40 AM, "D M German" <dmg@...> wrote:
Kim Weins | Senior Vice President, Marketing kim.weins@... Follow me on Twitter @KimAtOpenLogic 650 279 0410 | cell www.openlogic.com Follow OpenLogic on Twitter @openlogic |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Re: Ninka, and SPDX On the linux kernel and BSD licenses
Kate Stewart <kate.stewart@...>
Hi Daniel,
Lets move this thread to the SPDX legal subgroup discussion list. Since I think we'll need them to comment on the issues. To my eyes, yes those sentence fragments look basically equivalent, and we need to figure out a way to abstract these options, but I'm not a lawyer. :) Thanks, Kate On Tue, 2011-07-12 at 03:40 -0700, D M German wrote: Hi Everybody,Possibly just remove "the" from matching text? Neither the name of <ORGANIZATION> nor... is what the text could read, not sure "the" is adding to the semantics. Good question. ??? Kate |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Ninka, and SPDX On the linux kernel and BSD licenses
dmg
Hi Everybody,
I started implementing SPDX licenses in Ninka. I started with the BSDs (4, 3 and 2). My goal is to try to 'SPDX' the kernel before LinuxCon. Of the files that Ninka is properly identifying their license, there are many with other variants of the BSD: ---------------------------------------------------------------------- 71 BSD3 37 spdxBSD2 13 spdxBSD3 8 GPLv2,BSD3 8 GPLv2+,spdxBSD2 5 BSD2EndorseInsteadOfBinary 3 GPLv2,BSD3NoWarranty 2 spdxBSD4 2 SeeFile,BSD3 2 BSDOnlyEndorseNoWarranty 1 GPLv2+,spdxBSD3 1 GPLv2+,BSD3 1 GPLv2+,BSD2var2 ---------------------------------------------------------------------- Here is an example of the BSD3 (non-spdx): ./drivers/net/wimax/i2400m/usb-tx.c The sentence that does not match the SPDX version is: Neither the name of Intel Corporation nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. instead of: Neither the name of the <ORGANIZATION> nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. Here is another example of the BSD3 (non-spdx): ./fs/nfsd/nfs4recover.c This is the sentence that does not match: THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. instead of: THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. -- Daniel M. German http://turingmachine.org/ http://silvernegative.com/ dmg (at) uvic (dot) ca replace (at) with @ and (dot) with . |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Re: updating Ninka to output SPDX licenses
Jilayne Lovejoy <jilayne.lovejoy@...>
I would say, yes.
toggle quoted message
Show quoted text
Jilayne On 7/11/11 4:39 PM, "Daniel M. German" <dmg@...> wrote:
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
updating Ninka to output SPDX licenses
dmg
I have a question regarding when text matches a license. I am curious
how should I interpret optional quotes around some text. In particular, the BSD-4 includes this text: This product includes software developed by the <organization>. Would this text be equivalent: ``This product includes software developed by the <organization>.'' or "This product includes software developed by the <organization>." -- -- Daniel M. German http://turingmachine.org/ http://silvernegative.com/ dmg (at) uvic (dot) ca replace (at) with @ and (dot) with . |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Question on DRAFT 20110605 (package cardinality/verification)
Mario Tokarz <mario@...>
Hi all,
I have two questions regarding the latest spec from your home page. Thanks in advance for the time and consideration. 1.) Page 10 states that "A package can contain subpackages". How would those be added to the description, they do not seem to be part of the data model as shown on pg 35. Supporting subpackages with a full set of metadata seems to be a good approach to support descriptions of a full system image. 2.) Page 11/12: While package verification code is optional (most likely to be used when SPDX is not part of the src-archive), the verification code is mandatory. While discussing this with a colleague we could not quite figure out why this is the case or whether this should be better one or the other (i.e. it is mandatory to have one of the two within one description). I would be glad to get some thoughts on this. Thx, Mario -- Mario Tokarz BMW Car IT GmbH |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
SPDX web site review
Kirsten Newcomer
Hi all,
The website refresh team has put together a proposed information map for the SPDX web site refresh initiative. The map can be found here: http://spdx.org/wiki/spdx-web-site-mind-maps We’ll be reviewing this map today as part of the Business Team meeting from 12-12:30 pm ET. Meeting info: US 866-740-1260 Int'l http://www.readytalk.com/support/international-numbers.php ID 2404502 Web Meeting Www.readytalk.com ID 2404502 Thanks! Kirsten -- Kirsten Newcomer Senior Product Manager Black Duck Software, Inc. knewcomer@... Office: +1.781.810.1839 Mobile: +1.781-710-2184 |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Re: A face-to-face meeting in Vancouver?
Kim Weins
Hi Daniel
Since we will be launching SPDX at LinuxCOn Vancouver, we are also planning to schedule a BOF to discuss SPDX. I may have an extra pass for you -- I think we get 5 with our sponsorship and won't need them all. Kim On Fri 7/1/11 1:03 PM, "D M German" <dmg@...> wrote:
Kim Weins | Senior Vice President, Marketing kim.weins@... Follow me on Twitter @KimAtOpenLogic 650 279 0410 | cell www.openlogic.com Follow OpenLogic on Twitter @openlogic |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
optional effective license of a package.
dmg
hi everybody,
We (the research team I am part of, which includes Armijn) have being building a method/tool to identify dependencies in binaries by observing the build process. One of the test cases we are using is ffmpeg. What makes ffmpeg interesting is that it can be configured and build under three different licenses: LGPLv2.1+, GPLv2+, or GPLv3+. How? you pass a parameter at compilation time that indicates which license you want (by default lgplv2.1+). How would this be described in SPDX? A similar licensing scheme is the FreeBSD kernel. By default is BSD-3 (if I remember correctly) but it can be compiled as GPLv2+. --dmg -- -- Daniel M. German http://turingmachine.org/ http://silvernegative.com/ dmg (at) uvic (dot) ca replace (at) with @ and (dot) with . |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
A face-to-face meeting in Vancouver?
dmg
Hi everybody,
Is there any plan to have a face-to-face meeting in Vancouver during LinuxCon? For me it is very close, so I'll be interested in doing so, even informally. I am probably not going to register for LinuxCon (too expensive for me, but if anybody donates me a pass, I'll be happy to take it :) --dmg -- Daniel M. German http://turingmachine.org/ http://silvernegative.com/ dmg (at) uvic (dot) ca replace (at) with @ and (dot) with . |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
FOSSBazaar/SPDX server upgraded
Martin Michlmayr
I performed a system upgrade (Debian 5.0 to 6.0) on the server hosting
FOSSBazaar and SPDX. If you notice and problems with the web site or mailing lists, please let me know. -- Martin Michlmayr Open Source Program Office, Hewlett-Packard |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Agenda for Thursday General Meeting
Philip Odence
Meeting Time: June 30, 8am PDT / 10 am CDT / 11am EDT / 15:00 UTC. http://www.timeanddate.com/worldclock/converter.html Conf call dial-in: Conference code: 7812589502 Toll-free dial-in number (U.S. and Canada): (877) 435-0230 International dial-in number: (253) 336-6732 For those dialing in from other regions, a list of toll free numbers can be found: https://www.intercallonline.com/portlets/scheduling/viewNumbers/viewNumber.do?ownerNumber=6053870&audioType=RP&viewGa=false&ga=OFF Administrative Agenda
Technical Team Report - Kate Business Team Report - Kim Legal Team Report - Rockett/Karen Cross Functional Issues – Discussion Approach to bringing V1 to closure by early August- Kim Website update- Kirsten/Pierre/Steve Open Action Items
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
SPDX Beta Feedback (and Web Site Redesign)
Kim Weins
9:00 AM - 10:30 AM July 7, 2011 |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Cancelled: SPDX Business (Rollout) Call 11ET/8PT
Kim Weins
We will replace this meeting with Beta feedback meeting for this one date. |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
SPDX Beta Feedback Meeting on Jul 7
Kim Weins
Hi all
We will have a call to review all of the SPDX Beta feedback on Jul 7 at 11 ET/8PT. We will try to get all of the Beta participants on the call. In advance of the call, we will try to get Beta feedback sent out on the email lists. I’m inviting all of the teams, since it will be important to have representation from all the workstreams. This will replace the Business call for that date. We will also extend the time by a half hour so that we can also cover feedback from the website redesign team. Look for the invite, and please attend! Kim Kim Weins | Senior Vice President, Marketing kim.weins@... Follow me on Twitter @KimAtOpenLogic 650 279 0410 | cell www.openlogic.com Follow OpenLogic on Twitter @openlogic |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Updated Invitation: SPDX Legal Workstream Call 11ET/10CT/8PT @ Wed Jun 22 8am - 9am (spdx@fossbazaar.org)
Esteban Rockett <mgia3940@...>
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|