On 5/23/23 7:53 AM, Alexander Kanavin wrote:
On Tue, 23 May 2023 at 13:30, <cheerala.roh...@spacelabs.com> wrote:
I am reaching out to seek clarification regarding the license compatibility 
within theOpenEmbedded Meta-Security layer, particularly in relation to the 
presence of LGPL, GPL 2.0 and GPL 3.0 licenses and the ambiguity in the license 
information of the ClamAV tool and other Security tools in meta-security layer.

We have noticed that the meta-security layer within the OpenEmbedded project 
contains several components with LGPL, GPL 2.0 and GPL 3.0 licenses. 
Additionally, there is ambiguity regarding the license information for the 
ClamAV tool, as the OpenEmbedded recipe documentation indicates it is LGPL ( 
https://layers.openembedded.org/layerindex/recipe/32867/ ), while the ClamAV 
documentation specifies GPL 2.0 ( https://github.com/Cisco-Talos/clamav ).
I believe this is incorrectly written in the openembedded recipe and
the component is indeed GPL 2.0. CC Armin.

Yes indeed its incorrect. Patches welcome.

-armin
1. Please clarify on the ambiguity of license information for recipes and 
whether these recipes can be integrated into commercial products that 
necessitates strict adherence to licensing requirements.
2. Which license will apply to the Image that is bitbaked with openembedded 
recipes? will the license be MIT as Yocto project.
We do need to fix the clamav recipe to provide correct metadata (it
seems like a simple mistake in an isolated recipe), but otherwise
these are the questions for your company's legal department, not the
open source community. The community does not offer legal advice, but
we do know that a lot of successful products are shipped that are
built using Yocto project, and presumbly companies are able to handle
legal risks and requirements.

The image will contain code under many different licenses coming from
components such as clamav, and if you ship it in a product, you must
fulfil the requirements of all those licenses.

Alex

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#60105): https://lists.yoctoproject.org/g/yocto/message/60105
Mute This Topic: https://lists.yoctoproject.org/mt/99085040/21656
Mute #qt5:https://lists.yoctoproject.org/g/yocto/mutehashtag/qt5
Mute #kernel:https://lists.yoctoproject.org/g/yocto/mutehashtag/kernel
Mute #dunfell:https://lists.yoctoproject.org/g/yocto/mutehashtag/dunfell
Mute #imx8:https://lists.yoctoproject.org/g/yocto/mutehashtag/imx8
Mute #linux:https://lists.yoctoproject.org/g/yocto/mutehashtag/linux
Group Owner: yocto+ow...@lists.yoctoproject.org
Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub 
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to