From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-5.8 required=3.0 tests=HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,MENTIONS_GIT_HOSTING,SPF_HELO_NONE,SPF_PASS autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 8537DC31E40 for ; Mon, 10 Jun 2019 15:30:40 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id 61F7C2085A for ; Mon, 10 Jun 2019 15:30:40 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S2391205AbfFJPak (ORCPT ); Mon, 10 Jun 2019 11:30:40 -0400 Received: from mail-vk1-f176.google.com ([209.85.221.176]:37410 "EHLO mail-vk1-f176.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S2389786AbfFJPaj (ORCPT ); Mon, 10 Jun 2019 11:30:39 -0400 Received: by mail-vk1-f176.google.com with SMTP id 125so1743111vkb.4 for ; Mon, 10 Jun 2019 08:30:39 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=4QIqueVRZ0vHDTrgQVvMbPYkGCr0Vw7cjLlCZTPTeoY=; b=a0jR1F5bAKJnvGuh/iblGoM8GjJ2Y8MyW62mxwLFMP5EkH9W/p/k2VdbE7lA90f2XW 6EGFI7wfXeLdS4pFS/tRyOuLGVxww9rf5CBTmzQS3C8ZCT2m3prjE6kKGatdSfaoA4Q+ aQFi7GdaKE4Xl6SZqG2tUBwqMVIaa/SCBXI0dm25/Rl3zZKNA6VwXQVC/IzHSsSGvHZY oRAcxrbLumzyGllPrQKkVoDLNvwQAyP6nGTaAh3i/6f82ss9LCqHq/Yh19ZlRZa6pDB7 Ghnhm9SZrrZOW1lnTdJLYF5JqsgYwTjH0w7Zh5gPi7wtGIieSj60GskRx0JAQKKIzzx9 YC+A== X-Gm-Message-State: APjAAAW0Xgx+iAGs+nKz0ZJYpN7xXoEVcBCd9nXNtLIPB7GNq5SmQF++ DXKEyOVtKIGNhomR9WBmV3UHzBr6IrBau6ixhzzz5JVc X-Google-Smtp-Source: APXvYqxdGk1J5JEszgk31v0GpnoNzEANESGo2QjALrsxTjix+KtjEWewqkAIflWUM6ewGBAwe4cd/qq3OtH7P+mAtnA= X-Received: by 2002:a1f:9ed1:: with SMTP id h200mr25813226vke.16.1560180638481; Mon, 10 Jun 2019 08:30:38 -0700 (PDT) MIME-Version: 1.0 References: <20190604081044.651381636@linutronix.de> <20190604081206.123876666@linutronix.de> <1199b8ef-01e5-aa72-9673-f38b05434d14@metux.net> In-Reply-To: From: Richard Fontana Date: Mon, 10 Jun 2019 11:30:27 -0400 Message-ID: Subject: Re: [Batch 17 patch 43/57] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 494 To: Philippe Ombredanne Cc: Thomas Gleixner , "Enrico Weigelt, metux IT consult" , linux-spdx@vger.kernel.org Content-Type: text/plain; charset="UTF-8" Sender: linux-spdx-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-spdx@vger.kernel.org On Mon, Jun 10, 2019 at 4:36 AM Philippe Ombredanne wrote: > > Hi Thomas: > > On Tue, Jun 4, 2019 at 3:50 PM Thomas Gleixner wrote: > > > > On Tue, 4 Jun 2019, Enrico Weigelt, metux IT consult wrote: > > > > > On 04.06.19 11:20, Thomas Gleixner wrote: > > > > On Tue, 4 Jun 2019, Thomas Gleixner wrote: > > > > > > > > > From: Thomas Gleixner tglx@linutronix.de > > > > > > > > > > Based on 1 normalized pattern(s): > > > > > > > > > > copyright this file is distributed under the terms of the gnu > > > > > general public license gpl copies of the gpl can be obtained from > > > > > ftp prep ai mit edu pub gnu gpl each contributing author retains all > > > > > rights to their own work > > > > > > > > That's definitely a bold claim to deduce v2 only. The ftp link does not > > > > exist and the wayback machine does not have it either. > > We usually avoid making any bold claims in scancode license rules ;) > > ftp://prep.ai.mit.edu/pub/gnu/GPL linked to a GPL-2.0 based on the > wayback machine which is why that scancode-toolkit rule was tagged as > a GPL-2.0. > > You can see the notes I added back then in the license rule data file [1]: > > notes: The GPL version is not specified in this notice BUT at > https://web-beta.archive.org/web/20020809115410/http://prep.ai.mit.edu:80/pub/gnu/GPL > text is a GPL 2.0 license text > > Since then, the web-beta site when offline, and the correct URL should > use FTP and not HTTP so you can check [2] which is exactly a GPL > > I just pushed updated notes with the latest wayback URL [3] > > [1] https://github.com/nexB/scancode-toolkit/blob/09d4b009d4377eb1fc6f8439fe564e0a2c28e641/src/licensedcode/data/rules/gpl-2.0_617.yml > [2] https://web.archive.org/web/20020809115410/ftp://prep.ai.mit.edu/pub/gnu/GPL > [3] https://github.com/nexB/scancode-toolkit/commit/4f5d5f3ddddafd9e7eba639f5718a976ca7fdefe This seems a bit similar to another case I commented on a while ago. Despite the fact that the URL pointed to GPLv2, I don't see the GPL-2.0-only conclusion as being justified (beyond the accepted understanding that you can distribute GPL-2.0-or-later code under GPL-2.0-only). The license notice does not express any view about GPL versions. It is not really interesting that it references a copy of the version of the GPL in wide use at the time. In other words, it's like saying: "This code is licensed under the GPL. You can find a copy of the GPL here ". Nothing in that set of two sentences necessarily suggests an intention to limit the licensee to the specific version of the GPL that is referenced. It could be read as: "This code is licensed under the GPL, a maintained license that has a past and likely future versions. You can find a copy of one version of the GPL, the version that happens to be most widely used today, here". Richard