Bug#1013894: findutils: d/copyright: Missing licenses

[Bastian Germann]

Hi Andreas,

Any news on this? The freeze is nearing.

Thanks,
Bastian

Bug#1013894: findutils: d/copyright: Missing licenses

[Bastian Germann]

Am 28.06.22 um 20:05 schrieb Andreas Metzler:

I disagree that this is as clear cut as you make it sound, policy does
not require DEP-5 or similar per file level listings. The aggregated
work is licensed GPL-3+, there is no legal or policy need to list the
license of the individual files in the binary package. And we are
listing the copyright holder (FSF).


I did not claim that Policy requires DEP-5 or a per-file listing.

Policy 2.3:

"Every package must be accompanied by a verbatim copy of its distribution
license(s) in the file /usr/share/doc/PACKAGE/copyright.

The copyright information for files in a package must be copied verbatim
into /usr/share/doc/PACKAGE/copyright, when all of the following hold:

 1. the distribution license for those files requires that copyright
information be included in all copies and/or binary distributions;

 2. the files are shipped in the binary package, either in source or
compiled form; and

 3. the form in which the files are present in the binary package does
not include a plain text version of their copyright notices.
..."

I think that is quite clear cut. Even if the two files are not included
in the build at least their distribution licenses have to be included.
If they are included in the build (binary pkg) also the copyright info
has to be included. GPL does not just "overwrite" the other licenses in
a magical way.

Actually, I have done the work not to fight for it so you can just copy
one file...

Bug#1013894: findutils: d/copyright: Missing licenses

[Andreas Metzler]

On 2022-06-28 Bastian Germann  wrote:
> Hi Andreas,

> Am 28.06.22 um 18:36 schrieb Andreas Metzler:
> > Afaiui the aggregated work is GPL-3, this being the strictest license
> > and all code is either (C) FSF or public domain.

> Even if you use the LGPL's "relicensing to GPL" option ISC and
> BSD-4-clause-UC are still missing. The are compatible with and not as
> strict as GPL-3+ but still need to be documented not only to comply
> with Debian Policy but also for the binary package to be distributable
> without the source package (to fulfill their requirements of copying
> the copyright notice and license).

Hello,

I disagree that this is as clear cut as you make it sound, policy does
not require DEP-5 or similar per file level listings. The aggregated
work is licensed GPL-3+, there is no legal or policy need to list the
license of the individual files in the binary package. And we are
listing the copyright holder (FSF).

cu Andreas

Bug#1013894: findutils: d/copyright: Missing licenses

[Bastian Germann]

Hi Andreas,

Am 28.06.22 um 18:36 schrieb Andreas Metzler:

Afaiui the aggregated work is GPL-3, this being the strictest license
and all code is either (C) FSF or public domain.


Even if you use the LGPL's "relicensing to GPL" option ISC and BSD-4-clause-UC
are still missing. The are compatible with and not as strict as GPL-3+ but still
need to be documented not only to comply with Debian Policy but also for the
binary package to be distributable without the source package (to fulfill their
requirements of copying the copyright notice and license).

Thanks,
Bastian

Bug#1013894: findutils: d/copyright: Missing licenses

[Andreas Metzler]

On 2022-06-26 Bastian Germann  wrote:
> Source: findutils
> Version: 4.9.0-3
> Severity: important
> Tags: patch

> findutils' copyright file misses at least the following licenses:
> LGPL-2.1+,
> BSD-4-clause (UC -> 3-clause), and
> ISC

> Please find a d/copyright file attached that contains the missing licenses

Hello Bastian,

Afaiui the aggregated work is GPL-3, this being the strictest license
and all code is either (C) FSF or public domain.

cu Andreas

Bug#1013894: findutils: d/copyright: Missing licenses

[Bastian Germann]

Source: findutils
Version: 4.9.0-3
Severity: important
Tags: patch

findutils' copyright file misses at least the following licenses:
LGPL-2.1+,
BSD-4-clause (UC -> 3-clause), and
ISC

Please find a d/copyright file attached that contains the missing licensesFormat: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Source: ftp://ftp.gnu.org/gnu/findutils
Comment: Debian maintainer history:
 The original package was put together by Ian Murdock ,
 afterwards Kevin Dalley  took over.
 2003-07 Andreas Metzler  followed.
 .
 GNU find was written by Eric Decker ,
 with enhancements by David MacKenzie ,
 Jay Plett ,
 and Tim Wood .
 The idea for -print0 and xargs -0 came from
 Dan Bernstein .
 Improvements have been made by James Youngman .
 .
 GNU xargs
 was originally written by Mike Rendell, with enhancements by David
 MacKenzie. Modifications by James Youngman Dmitry V. Levin
 .
 GNU locate and its associated utilities were originally
 written by James Woods, with enhancements by David MacKenzie, James Youngman
 and Bas van Gompel.
 .
 Upstream's AUTHORS lists these major contributors:
 Eric B. Decker
 Michael Rendell
 David J. MacKenzie
 Jim Meyering
 Tim Wood
 Kevin Dalley 
 Paul Eggert 
 James Youngman 
 Jay Plett
 Paul Sheer
 Dmitry V. Levin
 Bas van Gompel
 Eric Blake 
 Andreas Metzler
 Kamil Dudka  
 Bernhard Voelker 
Upstream-Contact: Current upstream maintainer is James Youngman .

Files: *
Copyright: (C) 1990-2022 Free Software Foundation, Inc.
License: GPL-3+

License: GPL-3+
   This program is free software: you can redistribute it and/or modify
   it under the terms of the GNU General Public License as published by
   the Free Software Foundation, either version 3 of the License, or
   (at your option) any later version.
 .
   This program is distributed in the hope that it will be useful,
   but WITHOUT ANY WARRANTY; without even the implied warranty of
   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   GNU General Public License for more details.
 .
   You should have received a copy of the GNU General Public License
   along with this program.  If not, see .
 .
 On Debian GNU/Linux systems, the complete text of the GNU General
 Public License version 3 can be found in `/usr/share/common-licenses/GPL-3'.

Files: doc/*
Copyright: (C) 1994-2022 Free Software Foundation, Inc.
License: GFDL-NIV-1.3
 Permission is granted to copy, distribute and/or modify this
 document under the terms of the GNU Free Documentation License,
 Version 1.3 or any later version published by the Free Software
 Foundation; with no Invariant Sections, no Front-Cover Texts, and
 no Back-Cover Texts.  A copy of the license is included in the
 section entitled "GNU Free Documentation License".
 .
 On Debian GNU/Linux systems, the complete text of the GNU Free Documentation
 License, Version 1.3 can be found in `/usr/share/common-licenses/GFDL-1.3'.

Files: gl/lib/cdefs.h
Copyright: (C) 1992-2022 Free Software Foundation, Inc.
   The GNU Toolchain Authors.
License: LGPL-2.1+

Files: gl/lib/fts.c
   gl/lib/fts_.h
Copyright: (C) 2004-2022 Free Software Foundation, Inc.
   (c) 1989, 1993 The Regents of the University of California.  All 
rights reserved.
License: GPL-3+ and BSD-4-clause-UC

Files: gnulib-tests/inet_pton.c
Copyright: (C) 2006, 2008-2022 Free Software Foundation, Inc.
   (c) 1996,1999 by Internet Software Consortium.
License: LGPL-2.1+ and ISC

License: LGPL-2.1+
   This file is free software: you can redistribute it and/or modify
   it under the terms of the GNU Lesser General Public License as
   published by the Free Software Foundation; either version 2.1 of the
   License, or (at your option) any later version.
 .
   This file is distributed in the hope that it will be useful,
   but WITHOUT ANY WARRANTY; without even the implied warranty of
   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   GNU Lesser General Public License for more details.
 .
   You should have received a copy of the GNU Lesser General Public License
   along with this program.  If not, see .  */
 .
 On Debian GNU/Linux systems, the complete text of the GNU Lesser General
 Public License version 2.1 can be found in 
`/usr/share/common-licenses/LGPL-2.1'.

License: BSD-4-clause-UC
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions
 are met:
 1. Redistributions of source code must retain the above copyright
notice, this list of conditions and the following disclaimer.
 2. Redistributions in binary form must reproduce the above copyright
notice, this list of conditions and the following disclaimer in the
documentation and/or other materials provided with the distribution.
 4. Neither the name of the University nor the names of its contributors
may be used to endorse or promote products derived from this