On Thu, Sep 7, 2017 at 3:28 AM, Ulrich Mueller <u...@gentoo.org> wrote: >>>>>> On Wed, 6 Sep 2017, Rich Freeman wrote: > >> Do we routinely confirm that any site we list in SRC_URI has >> permission to redistribute files? That seems like a slippery slope. > > We don't, and for a package that comes with a license (as the vast > majority of packages does) it normally isn't necessary.
Why isn't this necessary? How do you know the person issuing the license actually has the right to issue it? > > The package in question doesn't come with any license though, which > means that only the copyright holder has the right to distribute it. > So I believe that some extra care is justified, especially when the > upstream location of the distfile has changed. Why? We don't redistribute anything that is copyrighted. Are you arguing that merely linking to the file is illegal? If so, then you better get the list archives purged. > > We don't know this for sure unless we ask the author. So whoever is > interested in keeping the package in the tree should sort these issues > out. > Perhaps if we want to enforce a policy like this we should take the time to actually write the policy down. As far as I can tell Gentoo has no such policy currently. -- Rich
