[Buildroot] [PATCH 1/1] nmap: update license

[Arnout Vandecappelle <arnout@mind.be>]

On 8/10/18 08:43, Thomas Petazzoni wrote:
> Hello,
> 
> On Sun, 7 Oct 2018 21:40:18 +0200, Arnout Vandecappelle wrote:
>> On 6/10/18 19:37, Yann E. MORIN wrote:
>>> So, now, about this specific nmap case... After reviwing the COPYING
>>> file, I would just state:
>>>
>>>     NMAP_LICENSE = GPL-2.0 w/ exception
>>>
>>> But given how specific the nmap project states that they are really
>>> *not* compatible with the GPL-2.0, and as such that exception should
>>> rather be seen as a restriction to the GPL-2.0. So, this is a totally
>>> different license, based on the GPL-2.0, but incompatible with it.
>>>
>>> So, in the end, I would just state:
>>>
>>>     NMAP_LICENSE = nmap license
>>>
>>> and let the user sort the mess on their own, because we can't do much
>>> better... :-/  
>>
>>  I double-checked the nmap license file and I agree with Yann. "nmap license" is
>> the best we can do.
>>
>>  To clarify: the license really is GPL-2.0 with OpenSSL exception. The
>> "additional restriction" is that they add an interpretation of what "derived
>> work" means exactly. It's not really a restriction, but it *does* change the
>> meaning of the license, so calling it GPL-2.0 is not accurate.
> 
> I don't know if that matters, but Debian calls it nmap-GPL-2.

 I think our convention is to use the SPDX term, and if it doesn't exist in SPDX
use "package license".

 I haven't checked though if nmap license exists in SPDX. They do have license
tags for some of the package-specific constructs.

 Regards,
 Arnout

-- 
Arnout Vandecappelle                          arnout at mind be
Senior Embedded Software Architect            +32-16-286500
Essensium/Mind                                http://www.mind.be
G.Geenslaan 9, 3001 Leuven, Belgium           BE 872 984 063 RPR Leuven
LinkedIn profile: http://www.linkedin.com/in/arnoutvandecappelle
GPG fingerprint:  7493 020B C7E3 8618 8DEC 222C 82EB F404 F9AC 0DDF