audit library license

audit library license

[hiroaki.fuse]

Dear All members,

We can find following lines in audit/README file

LICENSE
=======
The audit daemon is released as GPL'd code. The audit daemon's libraries
libaudit.* and libauparse.* are released under LGPL so that it may be
linked with 3rd party software.

I found that latest audit library linked libaucommon.so.

./lib/Makefile.in:AM_CPPFLAGS = -I. -I${top_srcdir} -I${top_srcdir}/auparse -I${top_srcdir}/common ./lib/Makefile.in:libaudit_la_LIBADD = $(CAPNG_LDADD) ${top_builddir}/common/libaucommon.la
./lib/Makefile.in:libaudit_la_DEPENDENCIES = $(libaudit_la_SOURCES) ../config.h ${top_builddir}/common/libaucommon.la

./auparse/Makefile.am:AM_CPPFLAGS = -I. -I${top_srcdir} -I${top_srcdir}/src -I${top_srcdir}/lib -I${top_srcdir}/common ./auparse/Makefile.am:libauparse_la_LIBADD = ${top_builddir}/lib/libaudit.la ${top_builddir}/common/libaucommon.la
./auparse/Makefile.am:libauparse_la_DEPENDENCIES = $(libauparse_la_SOURCES) ${top_builddir}/config.h ${top_builddir}/common/libaucommon.la

Libaucommo.so is created by following files

./common/Makefile.am:libaucommon_la_SOURCES = audit-fgets.c strsplit.c

And the license of audit/common/audit-fgets.c is GPLv2

This mean the license of latest audit libraries are also GPLv2.

Is my understanding correct?

--
Linux-audit mailing list
Linux-audit@redhat.com
https://listman.redhat.com/mailman/listinfo/linux-audit

Re: audit library license

[Steve Grubb]

Hello,

On Monday, January 30, 2023 7:55:20 PM EST hiroaki.fuse@ymail.ne.jp wrote:
> Dear All members,
> 
> We can find following lines in audit/README file
> 
> LICENSE
> =======
> The audit daemon is released as GPL'd code. The audit daemon's libraries
> libaudit.* and libauparse.* are released under LGPL so that it may be
> linked with 3rd party software.
> 
> I found that latest audit library linked libaucommon.so.
> 
> ./lib/Makefile.in:AM_CPPFLAGS = -I. -I${top_srcdir} -I${top_srcdir}/auparse
> -I${top_srcdir}/common ./lib/Makefile.in:libaudit_la_LIBADD =
> $(CAPNG_LDADD) ${top_builddir}/common/libaucommon.la
> ./lib/Makefile.in:libaudit_la_DEPENDENCIES = $(libaudit_la_SOURCES)
> ../config.h ${top_builddir}/common/libaucommon.la
> 
> ./auparse/Makefile.am:AM_CPPFLAGS = -I. -I${top_srcdir} -I${top_srcdir}/src
> -I${top_srcdir}/lib -I${top_srcdir}/common
> ./auparse/Makefile.am:libauparse_la_LIBADD =
> ${top_builddir}/lib/libaudit.la ${top_builddir}/common/libaucommon.la
> ./auparse/Makefile.am:libauparse_la_DEPENDENCIES =
> $(libauparse_la_SOURCES) ${top_builddir}/config.h
> ${top_builddir}/common/libaucommon.la
> 
> Libaucommo.so is created by following files
> 
> ./common/Makefile.am:libaucommon_la_SOURCES = audit-fgets.c strsplit.c
> 
> And the license of audit/common/audit-fgets.c is GPLv2
> 
> This mean the license of latest audit libraries are also GPLv2.
> 
> Is my understanding correct?

The intention stated in the README file is correct. The code in question is 
only used by 3 plugins which are GPL and those functions are hidden from 
external users of libaudit. The code can be relicenced to make it LGPL so 
everything matches the intentions.

-Steve


--
Linux-audit mailing list
Linux-audit@redhat.com
https://listman.redhat.com/mailman/listinfo/linux-audit

Re: audit library license

[Steve Grubb]

Hello,

On Wednesday, February 1, 2023 1:00:37 AM EST 布施 博明 wrote:
> Thank you for the comment.
> I also find following commit.
>   -
> https://github.com/linux-audit/audit-userspace/commit/e63a8b16281701510164
> 70075396e3697dd57a9b
> 
> BTW, I found another license question.
> 
> The libauparse.so are created following source codes.
> 
> In 'auparse/Makefile.am'
> 
> AM_CPPFLAGS = -I. -I${top_srcdir} -I${top_srcdir}/src -I${top_srcdir}/lib
> -I${top_srcdir}/common
> 
> libauparse_la_SOURCES = lru.c interpret.c nvlist.c ellist.c		\
> 	auparse.c auditd-config.c message.c data_buf.c 			\
> 	auparse-defs.h	auparse-idata.h data_buf.h 			\
> 	nvlist.h auparse.h ellist.h					\
> 	internal.h lru.h rnode.h interpret.h				\
> 	private.h expression.c expression.h tty_named_keys.h		\
> 	normalize.c normalize-llist.c normalize-llist.h 		\
> 	normalize-internal.h normalize_obj_kind_map.h			\
> 	normalize_record_map.h normalize_syscall_map.h
> 
> We can find following line in internal.h
> 
> #include "auditd-config.h"
> 
> I can find src/auditd-config.h file which is GPLv2.
> 
> The "src/auditd-config.h" should be also LGPLv2.1

That file is also mislabeled. It is now corrected. Thanks for the review.

-Steve


--
Linux-audit mailing list
Linux-audit@redhat.com
https://listman.redhat.com/mailman/listinfo/linux-audit