Hi Emilio,

On  Mo 10 Feb 2014 13:57:42 CET, Emilio Pozuelo Monfort wrote:

On 10/02/14 12:26, Mike Gabriel wrote:
Package: nautilus
Version: 3.8.2-2
Severity: serious

Dear maintainer,

while packaging Caja from the MATE Desktop project for Debian, I stumbled over a severe issue with the debian/copyright file of nautilus and its upstream tarball.

(1) the debian/copyright file is incomplete. Several LGPL-2+ files from the
upstream tarball (libnautilus-extension1a package) are not covered by
debian/copyright.

This needs updating.

Feel free to re-use parts of my current effort on Caja's debian/copyright [1].

(2) the upstream source tarball contains a COPYING-DOCS file (containing a
version of the GNU FDL-1.1+ license). This file probably relates to the docs/ folder in the upstream tarball (it is not quite clear). These files should not be in Debian as the GNU FDL-1.1+ is not considered as a DFSG compliant license
by the Debian project [1].

This file is a leftover for the help/ subdir that was present in nautilus
pre-2.0 (e.g. nautilus 1.1.1). Those were released under the GFDL. Nothing is
licensed under the GFDL anymore so this is fine. In any case, even if something was released under the GFDL, it would have to specify any Invariant Section for
it to be considered non-free. There are no mentions of invariant sections so
we're fine. I'll ask upstream to remove that file from the repo.

That is good news! Thanks for clearing this up!

Mike

[1] http://anonscm.debian.org/gitweb/?p=pkg-mate/caja.git;a=blob;f=debian/copyright

--

mike gabriel aka sunweaver (Debian Developer)
fon: +49 (1520) 1976 148

GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22  0782 9AF4 6B30 2577 1B31
mail: sunwea...@debian.org, http://sunweavers.net

Attachment: pgpQtYQNeQ_nT.pgp
Description: Digitale PGP-Signatur

Reply via email to