Re: tss2: Is it DFSG compatible

2017-07-25 Thread Breno Leitao
Hi Walter,

On Mon, Jul 24, 2017 at 03:09:14PM -0700, Walter Landry wrote:
> Breno Leitao  wrote:
> >   * The TCG grants to the user of the other parts of the specification
> >   (other than the Source Code) the rights to reproduce, distribute,
> >   display, and perform the specification solely for the purpose of
> >   developing products based on such documents.
> >
> > Is this last paragraph a possible violation of DSFG, or, should it not
> > be taken in consideration since it seems to exempt the source code?
>
> That makes the source code free, but everything else non-free.  Does
> the package contain the non-source bits?

Other than source code, the package contains manpages and documentation,
as usual.

Hon, who worked on Debianization of the package, checked with the
upstream author, and none of these parts came from the TCG
specification, thus, I suppose that we are covered by that license part.

Based on that, I will work to sponsor this package, and see if the
ftpmasters think differently.

Thank you!
Breno



Re: tss2: Is it DFSG compatible

2017-07-25 Thread Breno Leitao


Re: tss2: Is it DFSG compatible

2017-07-24 Thread Ben Finney
Breno Leitao  writes:

> There is a package at mentors[1] and a RFS[2] requesting this package
> to be included in Debian. Looking at it I found that, although this
> package uses license BSD-3 license, it contains the following excerpt

Thank you for raising the issue here.

For reference in this discussion, can you please include the full text
of the conditions in a message here?

>   Licenses and Notices
>   Copyright Licenses:
>
>   * Trusted Computing Group (TCG) grants to the user of the source
>   code in this specification (the "Source Code") a worldwide,
>   irrevocable, nonexclusive, royalty free, copyright license to
>   reproduce, create derivative works, distribute, display and perform
>   the Source Code and derivative works thereof, and to grant others
>   the rights granted herein.

Whatever qualifies as “the source code in this specification” is
explicitly free software for the recipient of this license; they are
free to do all those actions, which IMO is the full set of freedoms
needed for a work in Debian.

Good so far.

>   * The TCG grants to the user of the other parts of the specification
>   (other than the Source Code) the rights to reproduce, distribute,
>   display, and perform the specification solely for the purpose of
>   developing products based on such documents.

This attempts to limit the purpose which users of “parts of the
specification (other than the Source Code)” can have. That is IMO a
non-free restriction, and a work under those restrictions cannot be in
Debian because it violates DFSG §6.

> Is this last paragraph a possible violation of DSFG, or, should it not
> be taken in consideration since it seems to exempt the source code?

All parts of a work – indeed, the work as a whole – must satisfy the
DFSG for it to be allowed in Debian. Whether or not it is “source code”
is immaterial to that requirement.

Parts which are not free to Debian recipients must be excluded from
anything in the Debian system. So if a source package were needed to
build a work, it must not use (or derive from) those non-free parts in
any source or binary package.

-- 
 \  “For mad scientists who keep brains in jars, here's a tip: why |
  `\   not add a slice of lemon to each jar, for freshness?” —Jack |
_o__)   Handey |
Ben Finney



Re: tss2: Is it DFSG compatible

2017-07-24 Thread Walter Landry
Breno Leitao  wrote:
>   * The TCG grants to the user of the other parts of the specification
>   (other than the Source Code) the rights to reproduce, distribute,
>   display, and perform the specification solely for the purpose of
>   developing products based on such documents.
> 
> Is this last paragraph a possible violation of DSFG, or, should it not
> be taken in consideration since it seems to exempt the source code?

That makes the source code free, but everything else non-free.  Does
the package contain the non-source bits?

Cheers,
Walter Landry



tss2: Is it DFSG compatible

2017-07-24 Thread Breno Leitao
Hello debian-legal,

There is a package at mentors[1] and a RFS[2] requesting this package to
be included in Debian. Looking at it I found that, although this
package uses license BSD-3 license, it contains the following excerpt:

  
  A portion of the source code is derived from the TPM specification,
  which has a TCG copyright.  It is reproduced here for reference.
  

  Licenses and Notices
  Copyright Licenses:

  * Trusted Computing Group (TCG) grants to the user of the source code
  in this specification (the "Source Code") a worldwide, irrevocable,
  nonexclusive, royalty free, copyright license to reproduce, create
  derivative works, distribute, display and perform the Source Code and
  derivative works thereof, and to grant others the rights granted
  herein.

  * The TCG grants to the user of the other parts of the specification
  (other than the Source Code) the rights to reproduce, distribute,
  display, and perform the specification solely for the purpose of
  developing products based on such documents.

Is this last paragraph a possible violation of DSFG, or, should it not
be taken in consideration since it seems to exempt the source code?

Thank you,
Breno

[1] https://mentors.debian.net/debian/pool/main/t/tss2/tss2_1045-1.dsc
[2] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864532