From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=unavailable autolearn_force=no version=3.4.4 Path: eternal-september.org!reader01.eternal-september.org!reader02.eternal-september.org!news.eternal-september.org!mx02.eternal-september.org!.POSTED!not-for-mail From: Simon Wright Newsgroups: comp.lang.ada Subject: Re: Cairo bindings and e-mail license virus bombs Date: Wed, 10 Dec 2014 20:41:13 +0000 Organization: A noiseless patient Spider Message-ID: References: <6c8e0d3d-20e2-42c1-b2d3-826faca0d019@googlegroups.com> <96c5722f-c446-44ff-a445-48fbc184c11b@googlegroups.com> Mime-Version: 1.0 Content-Type: text/plain Injection-Info: mx02.eternal-september.org; posting-host="d7244c06a78575e4dbdf34623acd89dd"; logging-data="25738"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1819H1geHP+Xd1ErZ3uAGzmrsu089mUf1A=" User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3 (darwin) Cancel-Lock: sha1:mE3N1uuAZ+ok+1IrpcXCMWaDg9k= sha1:CQ3hzZB7wwJgrZ7hJcFBK/MK01o= Xref: news.eternal-september.org comp.lang.ada:23950 Date: 2014-12-10T20:41:13+00:00 List-Id: sbelmont700@gmail.com writes: > A license is not an inherent part of a file (any file); the license is > something you and the vendor agree to, whether via a webpage, > handshake, signed contract, or whatever. Binary libraries, for > example, don't have any licensing information 'in' them, yet whatever > terms you and vendor come to is what's in effect, essentially forever, > assuming that it's legal in the first place. Nobody can change this > after the fact. Binary libraries are irrelevant here. Look at the FSF's page on "How to use GNU licenses for your own software"[1]: "Whichever license you plan to use, the process involves adding two elements to each source file of your program: a copyright notice (such as "Copyright 1999 Terry Jones"), and a statement of copying permission, saying that the program is distributed under the terms of the GNU General Public License (or the Lesser GPL)." And you _should_ include a copy of the licenses, but if you don't the notice should say where to get them from. So if AdaCore are releasing their code under the GPL they ought to conform to the general policies of the FSF. And if the code they make available contains the GCC Runtime Library Exception then it just does. There are several remedies: one of those would be to take down the publicly-visible anonymous repos. They already recognise this in the GPL compiler suite by stripping the exception out of the source files. [1] http://www.gnu.org/licenses/gpl-howto.html