* Re: GPL Violation?
2006-08-17 6:42 ` Patrick McFarland
@ 2006-08-17 6:54 ` Arjan van de Ven
2006-08-17 7:32 ` Patrick McFarland
2006-08-17 8:32 ` Stefan Richter
` (2 subsequent siblings)
3 siblings, 1 reply; 56+ messages in thread
From: Arjan van de Ven @ 2006-08-17 6:54 UTC (permalink / raw)
To: Patrick McFarland; +Cc: Anonymous User, linux-kernel
On Thu, 2006-08-17 at 02:42 -0400, Patrick McFarland wrote:
> On Thursday 17 August 2006 01:48, Anonymous User wrote:
> > I work for a company that will be developing an embedded Linux based
> > consumer electronic device.
> >
> > I believe that new kernel modules will be written to support I/O
> > peripherals and perhaps other things. I don't know the details right
> > now. What I am trying to do is get an idea of what requirements there
> > are to make the source code available under the GPL.
>
> I am not a lawyer, and I suggest your company speak with one before doing
> this. (And most likely, someone from the list will correct me if I get
> something wrong).
>
> However, your company only has to release any code they use, preferably in the
> form of unmodified tarballs (pointing to project websites for downloads isn't
> valid anymore) plus patches against said unmodified tarballs if modified. If
> not modified, you still have to release the unmodified tarballs.
>
> They don't have to release source code for any module you wrote from scratch
> themselves, but said modules cannot say they are GPL (ie, they have to poison
> the kernel).
Just as a warning: This is your own legal opinion/advice, one which is
apparently not shared with many other kernel developers, including me.
For example see Greg's OLS keynote:
http://www.kroah.com/log/2006/07/23/#ols_2006_keynote
or some of Linus' emails on this topic:
http://cvs.fedora.redhat.com/viewcvs/*checkout*/rpms/kernel/devel/COPYING.modules?rev=1.5
I hope you have talked to a lawyer about your advice, but I sort of
doubt it since your answer doesn't sound like something a lawyer will
tell you (it sure doesn't match what the various lawyers I talked to
told me, not at all)
Anyway the best advice for anyone who asks such a question is to go talk
to a lawyer, and probably he should take a few of those links printed
out with him just to alert the lawyer about the controversial nature of
things.
Greetings,
Arjan van de Ven
--
if you want to mail me at work (you don't), use arjan (at) linux.intel.com
^ permalink raw reply [flat|nested] 56+ messages in thread* Re: GPL Violation?
2006-08-17 6:54 ` Arjan van de Ven
@ 2006-08-17 7:32 ` Patrick McFarland
2006-08-17 8:02 ` Adrian Bunk
0 siblings, 1 reply; 56+ messages in thread
From: Patrick McFarland @ 2006-08-17 7:32 UTC (permalink / raw)
To: Arjan van de Ven; +Cc: Anonymous User, linux-kernel
On Thursday 17 August 2006 02:54, Arjan van de Ven wrote:
> On Thu, 2006-08-17 at 02:42 -0400, Patrick McFarland wrote:
> > On Thursday 17 August 2006 01:48, Anonymous User wrote:
> > > I work for a company that will be developing an embedded Linux based
> > > consumer electronic device.
> > >
> > > I believe that new kernel modules will be written to support I/O
> > > peripherals and perhaps other things. I don't know the details right
> > > now. What I am trying to do is get an idea of what requirements there
> > > are to make the source code available under the GPL.
> >
> > I am not a lawyer, and I suggest your company speak with one before doing
> > this. (And most likely, someone from the list will correct me if I get
> > something wrong).
> >
> > However, your company only has to release any code they use, preferably
> > in the form of unmodified tarballs (pointing to project websites for
> > downloads isn't valid anymore) plus patches against said unmodified
> > tarballs if modified. If not modified, you still have to release the
> > unmodified tarballs.
> >
> > They don't have to release source code for any module you wrote from
> > scratch themselves, but said modules cannot say they are GPL (ie, they
> > have to poison the kernel).
>
> Just as a warning: This is your own legal opinion/advice, one which is
> apparently not shared with many other kernel developers, including me.
> For example see Greg's OLS keynote:
> http://www.kroah.com/log/2006/07/23/#ols_2006_keynote
> or some of Linus' emails on this topic:
> http://cvs.fedora.redhat.com/viewcvs/*checkout*/rpms/kernel/devel/COPYING.m
>odules?rev=1.5
>
> I hope you have talked to a lawyer about your advice, but I sort of
> doubt it since your answer doesn't sound like something a lawyer will
> tell you (it sure doesn't match what the various lawyers I talked to
> told me, not at all)
Like I told him, he needs to talk to a lawyer. Also, Linus probably won't
agree with me because I said closed source modules are possible. If Linus
wants those to not be possible, then hes going to have to change the
licensing agreement altogether; which, honestly, I wish he would.
Closed source modules are lame, and against the spirit of open source, but
that still doesn't make them against the license.
--
Patrick McFarland || www.AdTerrasPerAspera.com
"Computer games don't affect kids; I mean if Pac-Man affected us as kids,
we'd all be running around in darkened rooms, munching magic pills and
listening to repetitive electronic music." -- Kristian Wilson, Nintendo,
Inc, 1989
^ permalink raw reply [flat|nested] 56+ messages in thread
* Re: GPL Violation?
2006-08-17 7:32 ` Patrick McFarland
@ 2006-08-17 8:02 ` Adrian Bunk
2006-08-17 9:03 ` Patrick McFarland
2006-08-17 12:39 ` Grzegorz Kulewski
0 siblings, 2 replies; 56+ messages in thread
From: Adrian Bunk @ 2006-08-17 8:02 UTC (permalink / raw)
To: Patrick McFarland; +Cc: Arjan van de Ven, Anonymous User, linux-kernel
On Thu, Aug 17, 2006 at 03:32:51AM -0400, Patrick McFarland wrote:
> On Thursday 17 August 2006 02:54, Arjan van de Ven wrote:
> > On Thu, 2006-08-17 at 02:42 -0400, Patrick McFarland wrote:
> > > On Thursday 17 August 2006 01:48, Anonymous User wrote:
> > > > I work for a company that will be developing an embedded Linux based
> > > > consumer electronic device.
> > > >
> > > > I believe that new kernel modules will be written to support I/O
> > > > peripherals and perhaps other things. I don't know the details right
> > > > now. What I am trying to do is get an idea of what requirements there
> > > > are to make the source code available under the GPL.
> > >
> > > I am not a lawyer, and I suggest your company speak with one before doing
> > > this. (And most likely, someone from the list will correct me if I get
> > > something wrong).
> > >
> > > However, your company only has to release any code they use, preferably
> > > in the form of unmodified tarballs (pointing to project websites for
> > > downloads isn't valid anymore) plus patches against said unmodified
> > > tarballs if modified. If not modified, you still have to release the
> > > unmodified tarballs.
> > >
> > > They don't have to release source code for any module you wrote from
> > > scratch themselves, but said modules cannot say they are GPL (ie, they
> > > have to poison the kernel).
> >
> > Just as a warning: This is your own legal opinion/advice, one which is
> > apparently not shared with many other kernel developers, including me.
> > For example see Greg's OLS keynote:
> > http://www.kroah.com/log/2006/07/23/#ols_2006_keynote
> > or some of Linus' emails on this topic:
> > http://cvs.fedora.redhat.com/viewcvs/*checkout*/rpms/kernel/devel/COPYING.m
> >odules?rev=1.5
> >
> > I hope you have talked to a lawyer about your advice, but I sort of
> > doubt it since your answer doesn't sound like something a lawyer will
> > tell you (it sure doesn't match what the various lawyers I talked to
> > told me, not at all)
>
> Like I told him, he needs to talk to a lawyer. Also, Linus probably won't
> agree with me because I said closed source modules are possible. If Linus
> wants those to not be possible, then hes going to have to change the
> licensing agreement altogether; which, honestly, I wish he would.
>
> Closed source modules are lame, and against the spirit of open source, but
> that still doesn't make them against the license.
This is _your personal interpretation_ of what consists a "derived work"
under the GPL.
Other people have other opinions on this issue.
Other people even have asked lawyers that said they'd disagree with
interpretations like the one you expressed.
If someone needs advice about the legal risks of kernel modules with a
not GPL compatible licence, he has to ask lawyers knowing the copyright
laws of the countries he plans to distribute his products to.
This is a known grey area that has AFAIK not yet been brought to court
in any country, and neither your personal opinion on this issue nor my
personal opinion on this issue can replace legel advice.
cu
Adrian
--
Gentoo kernels are 42 times more popular than SUSE kernels among
KLive users (a service by SUSE contractor Andrea Arcangeli that
gathers data about kernels from many users worldwide).
There are three kinds of lies: Lies, Damn Lies, and Statistics.
Benjamin Disraeli
^ permalink raw reply [flat|nested] 56+ messages in thread* Re: GPL Violation?
2006-08-17 8:02 ` Adrian Bunk
@ 2006-08-17 9:03 ` Patrick McFarland
2006-08-18 17:56 ` Adrian Bunk
2006-08-17 12:39 ` Grzegorz Kulewski
1 sibling, 1 reply; 56+ messages in thread
From: Patrick McFarland @ 2006-08-17 9:03 UTC (permalink / raw)
To: Adrian Bunk; +Cc: Arjan van de Ven, Anonymous User, linux-kernel
On Thursday 17 August 2006 04:02, Adrian Bunk wrote:
> This is _your personal interpretation_ of what consists a "derived work"
> under the GPL.
> This is a known grey area that has AFAIK not yet been brought to court
> in any country, and neither your personal opinion on this issue nor my
> personal opinion on this issue can replace legel advice.
And I never said anything different. Stop being hostile to other's opinions.
LKML isn't the place for a flamewar.
> cu
> Adrian
--
Patrick McFarland || www.AdTerrasPerAspera.com
"Computer games don't affect kids; I mean if Pac-Man affected us as kids,
we'd all be running around in darkened rooms, munching magic pills and
listening to repetitive electronic music." -- Kristian Wilson, Nintendo,
Inc, 1989
^ permalink raw reply [flat|nested] 56+ messages in thread
* Re: GPL Violation?
2006-08-17 9:03 ` Patrick McFarland
@ 2006-08-18 17:56 ` Adrian Bunk
0 siblings, 0 replies; 56+ messages in thread
From: Adrian Bunk @ 2006-08-18 17:56 UTC (permalink / raw)
To: Patrick McFarland; +Cc: Arjan van de Ven, Anonymous User, linux-kernel
On Thu, Aug 17, 2006 at 05:03:03AM -0400, Patrick McFarland wrote:
> On Thursday 17 August 2006 04:02, Adrian Bunk wrote:
> > This is _your personal interpretation_ of what consists a "derived work"
> > under the GPL.
> > This is a known grey area that has AFAIK not yet been brought to court
> > in any country, and neither your personal opinion on this issue nor my
> > personal opinion on this issue can replace legel advice.
>
> And I never said anything different. Stop being hostile to other's opinions.
> LKML isn't the place for a flamewar.
You said:
<-- snip -->
Closed source modules are lame, and against the spirit of open source, but
that still doesn't make them against the license.
<-- snip -->
And exactly the question whether modules with not GPL compatible
licences are against the license is the grey area.
cu
Adrian
--
Gentoo kernels are 42 times more popular than SUSE kernels among
KLive users (a service by SUSE contractor Andrea Arcangeli that
gathers data about kernels from many users worldwide).
There are three kinds of lies: Lies, Damn Lies, and Statistics.
Benjamin Disraeli
^ permalink raw reply [flat|nested] 56+ messages in thread
* Re: GPL Violation?
2006-08-17 8:02 ` Adrian Bunk
2006-08-17 9:03 ` Patrick McFarland
@ 2006-08-17 12:39 ` Grzegorz Kulewski
2006-08-17 13:41 ` Alan Cox
1 sibling, 1 reply; 56+ messages in thread
From: Grzegorz Kulewski @ 2006-08-17 12:39 UTC (permalink / raw)
To: Adrian Bunk
Cc: Patrick McFarland, Arjan van de Ven, Anonymous User, linux-kernel
On Thu, 17 Aug 2006, Adrian Bunk wrote:
> On Thu, Aug 17, 2006 at 03:32:51AM -0400, Patrick McFarland wrote:
>> Closed source modules are lame, and against the spirit of open source, but
>> that still doesn't make them against the license.
>
> This is _your personal interpretation_ of what consists a "derived work"
> under the GPL.
>
> Other people have other opinions on this issue.
>
> Other people even have asked lawyers that said they'd disagree with
> interpretations like the one you expressed.
Right.
Then why not make some official and only right interpretation of what is
derived work for GPL2 in Linux and what is not, make it part of license or
COPYING file and end this type questions, doubts and flamewars once for
ever?
Why does Linus and others let lawyers and courts decide in such
(important?) thing like what is allowed in Linux (or with Linux) and what
is not?
Why not be brave, make the decission (preferably as liberal as possible)
and end all of this instead of letting others decide (worse: letting
others decide based on different and changing local, national rights and
probably also on who is paying them)?
If it would mean changing Linux license (and getting every contributor
agreement) then it could be made at least as a clear comment ("What is and
what is not derived work for GPL2 in Linux kernel in opinion of main Linux
kernel developers?") in the begining of the COPYING file, signed by most
important kernel developers (that produced 99% of the code and headers
used or touched by controversial modules anyway).
Thanks,
Grzegorz Kulewski
^ permalink raw reply [flat|nested] 56+ messages in thread* Re: GPL Violation?
2006-08-17 12:39 ` Grzegorz Kulewski
@ 2006-08-17 13:41 ` Alan Cox
2006-08-17 13:31 ` Grzegorz Kulewski
2006-08-18 2:03 ` Chase Venters
0 siblings, 2 replies; 56+ messages in thread
From: Alan Cox @ 2006-08-17 13:41 UTC (permalink / raw)
To: Grzegorz Kulewski
Cc: Adrian Bunk, Patrick McFarland, Arjan van de Ven, Anonymous User,
linux-kernel
Ar Iau, 2006-08-17 am 14:39 +0200, ysgrifennodd Grzegorz Kulewski:
> Why does Linus and others let lawyers and courts decide in such
> (important?) thing like what is allowed in Linux (or with Linux) and what
> is not?
Because licenses are bounded and defined by the law. In the case of
copyright based rights they extend only to the thing that is copyrighted
and any derivatives so the grey area is not one the GPL could clarify
further.
Alan
^ permalink raw reply [flat|nested] 56+ messages in thread
* Re: GPL Violation?
2006-08-17 13:41 ` Alan Cox
@ 2006-08-17 13:31 ` Grzegorz Kulewski
2006-08-17 15:52 ` Theodore Tso
2006-08-18 2:03 ` Chase Venters
1 sibling, 1 reply; 56+ messages in thread
From: Grzegorz Kulewski @ 2006-08-17 13:31 UTC (permalink / raw)
To: Alan Cox
Cc: Adrian Bunk, Patrick McFarland, Arjan van de Ven, Anonymous User,
linux-kernel
On Thu, 17 Aug 2006, Alan Cox wrote:
> Ar Iau, 2006-08-17 am 14:39 +0200, ysgrifennodd Grzegorz Kulewski:
>> Why does Linus and others let lawyers and courts decide in such
>> (important?) thing like what is allowed in Linux (or with Linux) and what
>> is not?
>
> Because licenses are bounded and defined by the law. In the case of
> copyright based rights they extend only to the thing that is copyrighted
> and any derivatives so the grey area is not one the GPL could clarify
> further.
Ok, that could be a reason. But then at least make such strong comment as
proposed later in my post and put it where people will be searching for it
- in COPYING file. Even if it will not be legally enforceable, it will
show the intentions of main authors and will anwser many people
questions.
Grzegorz Kulewski
^ permalink raw reply [flat|nested] 56+ messages in thread
* Re: GPL Violation?
2006-08-17 13:31 ` Grzegorz Kulewski
@ 2006-08-17 15:52 ` Theodore Tso
0 siblings, 0 replies; 56+ messages in thread
From: Theodore Tso @ 2006-08-17 15:52 UTC (permalink / raw)
To: Grzegorz Kulewski
Cc: Alan Cox, Adrian Bunk, Patrick McFarland, Arjan van de Ven,
Anonymous User, linux-kernel
On Thu, Aug 17, 2006 at 03:31:53PM +0200, Grzegorz Kulewski wrote:
> Ok, that could be a reason. But then at least make such strong comment as
> proposed later in my post and put it where people will be searching for it
> - in COPYING file. Even if it will not be legally enforceable, it will
> show the intentions of main authors and will anwser many people
> questions.
That assumes that the "main authors" want to spend time debating the
point and making an official statement --- one that might not be held
up in a court of law, afterwards. And in fact it assumes people want
to waste time discussing this further in LKML, as well.
When I asked the question of my IP Law professor when I was taking
some classes at the Sloan School of Management 12 years ago, in his
opinion a claim that the GPL could infect across a dynamic link would
be "laughed out of court". But that wasn't legal advice, and there
hasn't been legal precedent, and while as far as I know no court has
ruled directly on that point in the past 12 years, there may be others
that would cause a lawyer to be more or less certain about what might
happen should it ever go to court. However, I am not a lawyer, and
neither are most people on this list. Hence Alan's advice, "go see a
lawyer"; a lawyer will listen to the facts of your situation, apply it
to the law as it currently exists in a particular time and place, and
tender you legal advice.
But regardless of whether or not it is legal, a better and more
stronger argument is that companies that try to use proprietary binary
modules will not be able to service their customers as effectively,
and thus be at a competitive disadvantage. From a code maintenance,
and future-proofing point of view, you really, really, really want to
have your device drivers in mainline. In my opinion, the legal
arguments are only good for wasting bandwidth on mailing lists.
- Ted
^ permalink raw reply [flat|nested] 56+ messages in thread
* Re: GPL Violation?
2006-08-17 13:41 ` Alan Cox
2006-08-17 13:31 ` Grzegorz Kulewski
@ 2006-08-18 2:03 ` Chase Venters
1 sibling, 0 replies; 56+ messages in thread
From: Chase Venters @ 2006-08-18 2:03 UTC (permalink / raw)
To: Alan Cox
Cc: Grzegorz Kulewski, Adrian Bunk, Patrick McFarland,
Arjan van de Ven, Anonymous User, linux-kernel
On Thursday 17 August 2006 08:41, Alan Cox wrote:
> Ar Iau, 2006-08-17 am 14:39 +0200, ysgrifennodd Grzegorz Kulewski:
> > Why does Linus and others let lawyers and courts decide in such
> > (important?) thing like what is allowed in Linux (or with Linux) and what
> > is not?
>
> Because licenses are bounded and defined by the law. In the case of
> copyright based rights they extend only to the thing that is copyrighted
> and any derivatives so the grey area is not one the GPL could clarify
> further.
>
IANAL, but I think there are 2 cases here:
1. The courts decide what "derived works" are when someone distributes code
that they wrote. So if NVIDIA writes nvidia.ko, the courts will decide if
nvidia.ko is a derived work.
2. However, the only valid license under which to distribute the Linux kernel
is GPL. If the GPL prohibits linking in non-GPL code, and Linux adds no
exception, then one clearly has no license to distribute Linux if they
distribute it alongside code that links in to Linux and does not carry the
GPL license. If they were just shipping binary modules, it's questionable
grey area. But if they distribute _Linux itself_, especially considering they
haven't paid for it (and hence have no 'natural' rights), they must comply
with the GPL and the GPL's definitions of its terms, else they have no
license at all to distribute Linux and are in violation of copyright.
NVIDIA might be able to skate closer to the cracks because they do not
distribute the Linux kernel. NVIDIA couldn't ship NVIDIA Linux with the
binary-only driver. TiVo has to obey the GPL to distribute Linux, so does
Linksys, etc. In the embedded case, you're distributing the kernel which
means you must execute whatever conditions GPL chooses to impose.
Thanks,
Chase
^ permalink raw reply [flat|nested] 56+ messages in thread
* Re: GPL Violation?
2006-08-17 6:42 ` Patrick McFarland
2006-08-17 6:54 ` Arjan van de Ven
@ 2006-08-17 8:32 ` Stefan Richter
2006-08-17 9:36 ` Patrick McFarland
2006-08-17 9:37 ` David Woodhouse
2006-08-18 9:51 ` David Schwartz
3 siblings, 1 reply; 56+ messages in thread
From: Stefan Richter @ 2006-08-17 8:32 UTC (permalink / raw)
To: Patrick McFarland; +Cc: Anonymous User, linux-kernel
(LKML readers please apologize this more or less off-topic posting.)
Patrick McFarland wrote:
> They don't have to release source code for any module you wrote from scratch
> themselves, but said modules cannot say they are GPL (ie, they have to poison
> the kernel).
>
> Also, said kernel modules have to be real modules and not statically linked
> into the kernel, and said modules have to have the compiled component objects
> (ie, *.o) available so people can relink them into new modules to work with
> new kernels.
I never heard that static vs. dynamic linking mattered WRT licensing, at
least if the unmodified GPL is involved. If a driver author doesn't want
to publish under the terms of GPL, an implementation in userspace may
make it possible to avoid linking with GPL code. But in the end, as has
been said multiple times: Consult a lawyer for such questions.
Here are a few pointers to the opinion of FSF as published in their FAQ.
(I doubt that the organization FSF is among the copyright holders of
Linux, but the FSF is copyright holder of the GPL and authors of GPL run
FSF. Therefore the FSF's statements are certainly relevant for you to
consider.)
About so-called modules, or "mere aggregation" versus "combining two
modules into one program" (highly relevant to Linux drivers):
http://www.fsf.org/licensing/licenses/gpl-faq.html#MereAggregation
About so-called libraries (a lot of parts of Linux are libraries or are
very similar to libraries):
http://www.fsf.org/licensing/licenses/gpl-faq.html#IfLibraryIsGPL
About so-called plugins (hardly relevant for kernel drivers):
http://www.fsf.org/licensing/licenses/gpl-faq.html#GPLAndPlugins
--
Stefan Richter
-=====-=-==- =--- =---=
http://arcgraph.de/sr/
^ permalink raw reply [flat|nested] 56+ messages in thread
* Re: GPL Violation?
2006-08-17 8:32 ` Stefan Richter
@ 2006-08-17 9:36 ` Patrick McFarland
2006-08-17 11:25 ` Alan Cox
0 siblings, 1 reply; 56+ messages in thread
From: Patrick McFarland @ 2006-08-17 9:36 UTC (permalink / raw)
To: Stefan Richter; +Cc: Anonymous User, linux-kernel
On Thursday 17 August 2006 04:32, Stefan Richter wrote:
> Patrick McFarland wrote:
> > They don't have to release source code for any module you wrote from
> > scratch themselves, but said modules cannot say they are GPL (ie, they
> > have to poison the kernel).
> >
> > Also, said kernel modules have to be real modules and not statically
> > linked into the kernel, and said modules have to have the compiled
> > component objects (ie, *.o) available so people can relink them into new
> > modules to work with new kernels.
>
> I never heard that static vs. dynamic linking mattered WRT licensing, at
> least if the unmodified GPL is involved.
AFAICT you can't link GPL to non-GPL code and ship the product without heading
deep into grey area territory. Both the GPL and LGPL has specific wording for
certain cases (such as allowing LGPL (possibly GPL too?) to link to closed
source system libraries and the reverse as well), but its really icky to link
GPL to closed source code in any form.
> If a driver author doesn't want
> to publish under the terms of GPL, an implementation in userspace may
> make it possible to avoid linking with GPL code.
But doesn't that force the GPL code to rely on closed source code, and not
function properly without it? I remember a part in the GPL about not allowing
that, but I can't seem to find it atm.
> Here are a few pointers to the opinion of FSF as published in their FAQ.
> (I doubt that the organization FSF is among the copyright holders of
> Linux, but the FSF is copyright holder of the GPL and authors of GPL run
> FSF. Therefore the FSF's statements are certainly relevant for you to
> consider.)
Now thats pretty useful information. I think everyone should bookmark those
and file those away for later, I sure am. Thanks for finding those.
--
Patrick McFarland || www.AdTerrasPerAspera.com
"Computer games don't affect kids; I mean if Pac-Man affected us as kids,
we'd all be running around in darkened rooms, munching magic pills and
listening to repetitive electronic music." -- Kristian Wilson, Nintendo,
Inc, 1989
^ permalink raw reply [flat|nested] 56+ messages in thread
* Re: GPL Violation?
2006-08-17 9:36 ` Patrick McFarland
@ 2006-08-17 11:25 ` Alan Cox
2006-08-17 11:48 ` Neil Brown
0 siblings, 1 reply; 56+ messages in thread
From: Alan Cox @ 2006-08-17 11:25 UTC (permalink / raw)
To: Patrick McFarland; +Cc: Stefan Richter, Anonymous User, linux-kernel
Ar Iau, 2006-08-17 am 05:36 -0400, ysgrifennodd Patrick McFarland:
> > If a driver author doesn't want
> > to publish under the terms of GPL, an implementation in userspace may
> > make it possible to avoid linking with GPL code.
>
> But doesn't that force the GPL code to rely on closed source code, and not
> function properly without it? I remember a part in the GPL about not allowing
> that, but I can't seem to find it atm.
It shouldn't generally be a grey area but that is why the Linux kernel
has always had this clarification in COPYING about the interpretation
NOTE! This copyright does *not* cover user programs that use kernel
services by normal system calls - this is merely considered normal use
of the kernel, and does *not* fall under the heading of "derived work".
Also note that the GPL below is copyrighted by the Free Software
Foundation, but the instance of code that it refers to (the Linux
kernel) is copyrighted by me and others who actually wrote it.
^ permalink raw reply [flat|nested] 56+ messages in thread
* Re: GPL Violation?
2006-08-17 11:25 ` Alan Cox
@ 2006-08-17 11:48 ` Neil Brown
0 siblings, 0 replies; 56+ messages in thread
From: Neil Brown @ 2006-08-17 11:48 UTC (permalink / raw)
To: Alan Cox; +Cc: Patrick McFarland, Stefan Richter, Anonymous User, linux-kernel
On Thursday August 17, alan@lxorguk.ukuu.org.uk wrote:
> Ar Iau, 2006-08-17 am 05:36 -0400, ysgrifennodd Patrick McFarland:
> > > If a driver author doesn't want
> > > to publish under the terms of GPL, an implementation in userspace may
> > > make it possible to avoid linking with GPL code.
> >
> > But doesn't that force the GPL code to rely on closed source code, and not
> > function properly without it? I remember a part in the GPL about not allowing
> > that, but I can't seem to find it atm.
>
> It shouldn't generally be a grey area but that is why the Linux kernel
> has always had this clarification in COPYING about the interpretation
>
> NOTE! This copyright does *not* cover user programs that use kernel
> services by normal system calls - this is merely considered normal use
> of the kernel, and does *not* fall under the heading of "derived work".
> Also note that the GPL below is copyrighted by the Free Software
> Foundation, but the instance of code that it refers to (the Linux
> kernel) is copyrighted by me and others who actually wrote it.
Hmmm. I wonder what "normal" system calls are. And how they contrast
to "abnormal" system calls, which presumably aren't covered by the
above note.
I wonder if reading and writing to files in /sys and /proc are
'normal' in this context or not. Certainly I think that non-standard
ioctls could be considered to abnormal.
I guess that's one for the lawyers :-)
NeilBrown
^ permalink raw reply [flat|nested] 56+ messages in thread
* Re: GPL Violation?
2006-08-17 6:42 ` Patrick McFarland
2006-08-17 6:54 ` Arjan van de Ven
2006-08-17 8:32 ` Stefan Richter
@ 2006-08-17 9:37 ` David Woodhouse
2006-08-17 23:45 ` Ian Stirling
2006-08-20 22:05 ` Andrea Arcangeli
2006-08-18 9:51 ` David Schwartz
3 siblings, 2 replies; 56+ messages in thread
From: David Woodhouse @ 2006-08-17 9:37 UTC (permalink / raw)
To: Patrick McFarland; +Cc: Anonymous User, linux-kernel
On Thu, 2006-08-17 at 02:42 -0400, Patrick McFarland wrote:
> They don't have to release source code for any module you wrote from scratch
> themselves, but said modules cannot say they are GPL (ie, they have to poison
> the kernel).
If you're distributing a product which contains both the kernel and some
modules, then there is a more important (or at least a more clear-cut)
caveat to bear in mind than the question of whether the module in itself
is a derived work.
Read section 2 of the GPL carefully:
"These requirements apply to the modified work as a whole. If
identifiable sections of that work are not derived from the
Program, and can be reasonably considered independent and
separate works in themselves, then this License, and its terms,
do not apply to those sections when you distribute them as
separate works."
That's what Patrick is referring to, presumably, (and he's assuming that
your module would _not_ be derived from the kernel, which many people
are already disputing).
However, do not let that debate distract you from the fact that the GPL
continues as follows:
"But when you distribute the same sections as part of a whole
which is a work based on the Program, the distribution of the
whole must be on the terms of this License, whose permissions
for other licensees extend to the ENTIRE WHOLE, and thus to EACH
AND EVERY PART REGARDLESS OF WHO WROTE IT."
So when you distribute a product which combines the kernel and some
driver module, and which isn't 'mere aggregation on a storage medium'
but is actually a coherent whole which works together and wouldn't
function correctly if either the kernel or the module were missing, then
your module _must_ be released under the terms of the GPL too.
This is entirely separate to the question of whether the module should
be considered a derived work in itself -- if we consider the module a
derived work (as I personally do), then of course you must release the
module's source under the terms of the GPL, whatever happens.
But _even_ if GregKH, Arjan and all of IBM's lawyers are wrong and we
don't consider the module a derived work, then you may release the
module without source _only_ if you do so on its _own_ ("as separate
works"), and not as part of a product which also contains a Linux
kernel.
--
dwmw2
^ permalink raw reply [flat|nested] 56+ messages in thread* Re: GPL Violation?
2006-08-17 9:37 ` David Woodhouse
@ 2006-08-17 23:45 ` Ian Stirling
2006-08-18 8:28 ` David Woodhouse
2006-08-18 8:53 ` Bernd Petrovitsch
2006-08-20 22:05 ` Andrea Arcangeli
1 sibling, 2 replies; 56+ messages in thread
From: Ian Stirling @ 2006-08-17 23:45 UTC (permalink / raw)
To: David Woodhouse; +Cc: Patrick McFarland, Anonymous User, linux-kernel
David Woodhouse wrote:
<snip>
> So when you distribute a product which combines the kernel and some
> driver module, and which isn't 'mere aggregation on a storage medium'
> but is actually a coherent whole which works together and wouldn't
> function correctly if either the kernel or the module were missing, then
> your module _must_ be released under the terms of the GPL too.
'function correctly' ?
As what?
I've bought a number of devices that I know will not have all the
advertised features available to me, because I install a different
version of linux on them.
It functions correctly, as delivered.
With the appropriate disclaimers on the box, it cannot function
incorrectly, as you will know that the thumb-print reader won't
work if you upgrade the kernel, and if you intend to do so,
you don't buy.
I've got a number of wireless routers that I don't have working
drivers for the wifi cards, happily wired into my network doing
things that they were not intended for, but they are functioning
'correctly' as I see it.
^ permalink raw reply [flat|nested] 56+ messages in thread
* Re: GPL Violation?
2006-08-17 23:45 ` Ian Stirling
@ 2006-08-18 8:28 ` David Woodhouse
2006-08-18 12:52 ` Ian Stirling
2006-08-18 8:53 ` Bernd Petrovitsch
1 sibling, 1 reply; 56+ messages in thread
From: David Woodhouse @ 2006-08-18 8:28 UTC (permalink / raw)
To: Ian Stirling; +Cc: Patrick McFarland, Anonymous User, linux-kernel
On Fri, 2006-08-18 at 00:45 +0100, Ian Stirling wrote:
> With the appropriate disclaimers on the box, it cannot function
> incorrectly, as you will know that the thumb-print reader won't
> work if you upgrade the kernel, and if you intend to do so,
> you don't buy.
As far as I can tell, the GPL does not contain the text "if you are
shipping a commercial product don't really want to comply with this
licence, you can just put a disclaimer on the box of your product and
that's OK instead".
> I've got a number of wireless routers that I don't have working
> drivers for the wifi cards, happily wired into my network doing
> things that they were not intended for, but they are functioning
> 'correctly' as I see it.
Both are fairly clear examples of GPL violations. The manufacturer has
_not_ granted you the freedom to copy, modify and distribute all the
Linux-based code in the device, as is required by the GPL.
--
dwmw2
^ permalink raw reply [flat|nested] 56+ messages in thread
* Re: GPL Violation?
2006-08-18 8:28 ` David Woodhouse
@ 2006-08-18 12:52 ` Ian Stirling
0 siblings, 0 replies; 56+ messages in thread
From: Ian Stirling @ 2006-08-18 12:52 UTC (permalink / raw)
To: David Woodhouse; +Cc: Patrick McFarland, Anonymous User, linux-kernel
David Woodhouse wrote:
> On Fri, 2006-08-18 at 00:45 +0100, Ian Stirling wrote:
>> With the appropriate disclaimers on the box, it cannot function
>> incorrectly, as you will know that the thumb-print reader won't
>> work if you upgrade the kernel, and if you intend to do so,
>> you don't buy.
>
> As far as I can tell, the GPL does not contain the text "if you are
> shipping a commercial product don't really want to comply with this
> licence, you can just put a disclaimer on the box of your product and
> that's OK instead".
Sorry, I was tired, and misread that you were making the
'not merely an archive' point as an argument for why the module
was a derived work, which makes little sense.
^ permalink raw reply [flat|nested] 56+ messages in thread
* Re: GPL Violation?
2006-08-17 23:45 ` Ian Stirling
2006-08-18 8:28 ` David Woodhouse
@ 2006-08-18 8:53 ` Bernd Petrovitsch
2006-08-18 9:04 ` David Woodhouse
1 sibling, 1 reply; 56+ messages in thread
From: Bernd Petrovitsch @ 2006-08-18 8:53 UTC (permalink / raw)
To: Ian Stirling
Cc: David Woodhouse, Patrick McFarland, Anonymous User, linux-kernel
On Fri, 2006-08-18 at 00:45 +0100, Ian Stirling wrote:
[...]
> With the appropriate disclaimers on the box, it cannot function
> incorrectly, as you will know that the thumb-print reader won't
Providing that a judge doesn't rule otherwise in court based on local
laws. And judges rule (most of the time) also based on common sense
(e.g. if you buy a copy-protected music CD/DVD and you cannot play it on
an ordinary CD/DVD player, the CD/DVD is "broken" and must be replaced
by the shop where you bought it or you get your money back returning the
defective CD/DVD).
And yes, there are (lots of other) issues you can't legally remove with
any disclaimer (at least in .at - and probably more continental European
countries).
> work if you upgrade the kernel, and if you intend to do so,
> you don't buy.
If you tamper with the product "as you like" (read: in unintended ways,
not through officially available interfaces, etc.), there are IMHO
(in .at) no disclaimers necessary - the producer has no responsibility
any more from the moment you start tampering.
Bernd
--
Firmix Software GmbH http://www.firmix.at/
mobil: +43 664 4416156 fax: +43 1 7890849-55
Embedded Linux Development and Services
^ permalink raw reply [flat|nested] 56+ messages in thread* Re: GPL Violation?
2006-08-18 8:53 ` Bernd Petrovitsch
@ 2006-08-18 9:04 ` David Woodhouse
2006-08-18 9:15 ` Bernd Petrovitsch
0 siblings, 1 reply; 56+ messages in thread
From: David Woodhouse @ 2006-08-18 9:04 UTC (permalink / raw)
To: Bernd Petrovitsch
Cc: Ian Stirling, Patrick McFarland, Anonymous User, linux-kernel
On Fri, 2006-08-18 at 10:53 +0200, Bernd Petrovitsch wrote:
> If you tamper with the product "as you like" (read: in unintended
> ways, not through officially available interfaces, etc.), there are
> IMHO (in .at) no disclaimers necessary - the producer has no
> responsibility any more from the moment you start tampering.
No responsibility under warranty, I agree. But that's entirely
irrelevant to the discussion at hand, as far as I can tell.
Your tampering does _not_ mean that they no longer have to comply with
the licence terms of the software they've shipped on the device. If it's
Windows, they still need to pay Microsoft for it. And if it's Linux they
still need to release all the relevant source code.
--
dwmw2
^ permalink raw reply [flat|nested] 56+ messages in thread
* Re: GPL Violation?
2006-08-18 9:04 ` David Woodhouse
@ 2006-08-18 9:15 ` Bernd Petrovitsch
0 siblings, 0 replies; 56+ messages in thread
From: Bernd Petrovitsch @ 2006-08-18 9:15 UTC (permalink / raw)
To: David Woodhouse
Cc: Ian Stirling, Patrick McFarland, Anonymous User, linux-kernel
On Fri, 2006-08-18 at 10:04 +0100, David Woodhouse wrote:
> On Fri, 2006-08-18 at 10:53 +0200, Bernd Petrovitsch wrote:
> > If you tamper with the product "as you like" (read: in unintended
> > ways, not through officially available interfaces, etc.), there are
> > IMHO (in .at) no disclaimers necessary - the producer has no
> > responsibility any more from the moment you start tampering.
>
> No responsibility under warranty, I agree. But that's entirely
And there are several other aspects (at least in .at).
> irrelevant to the discussion at hand, as far as I can tell.
OK.
> Your tampering does _not_ mean that they no longer have to comply with
> the licence terms of the software they've shipped on the device. If it's
Of course (sorry, that was apparently not enough).
> Windows, they still need to pay Microsoft for it. And if it's Linux they
> still need to release all the relevant source code.
Probably more on-topic:
We have law people in .at who think/propose/have the opinion that one
entity as seen by the user/consumer has one license. So if you pack a
GPL program on it, the whole entity is GPL.
Given the current common method of providing one firmware image per
device for download to upgrade/bugfix, the producer of that image must
adhere to the GPL for *all+ of the source code of that image (+
necessary toolchain etc.).
The reasoning is: The user/consumer sees one thing and that's it.
If such an interpretation is "good" or "bad" (and for whom) is another
question.
The counter strategies to work around that are probably obvious.
Bernd
--
Firmix Software GmbH http://www.firmix.at/
mobil: +43 664 4416156 fax: +43 1 7890849-55
Embedded Linux Development and Services
^ permalink raw reply [flat|nested] 56+ messages in thread
* Re: GPL Violation?
2006-08-17 9:37 ` David Woodhouse
2006-08-17 23:45 ` Ian Stirling
@ 2006-08-20 22:05 ` Andrea Arcangeli
2006-08-20 22:20 ` Arjan van de Ven
1 sibling, 1 reply; 56+ messages in thread
From: Andrea Arcangeli @ 2006-08-20 22:05 UTC (permalink / raw)
To: David Woodhouse; +Cc: Patrick McFarland, Anonymous User, linux-kernel
On Thu, Aug 17, 2006 at 10:37:11AM +0100, David Woodhouse wrote:
> But _even_ if GregKH, Arjan and all of IBM's lawyers are wrong and we
I agree about the rest and I'm certainly not trying to make life easy
to the binary only drivers, but for completeness I'd like to add that
IBM at some point released binary only drivers for some virtual device
on s390. I think they're all GPL by now, but my point remains that
even IBM must have thought they could legally ship binary only drivers
in the past (like everybody else did until recently after all).
My only worry is what's the legal status of the vsyscall if the only
thing that matters is the COPYING file and not its generally agreed
interpretation.
^ permalink raw reply [flat|nested] 56+ messages in thread
* Re: GPL Violation?
2006-08-20 22:05 ` Andrea Arcangeli
@ 2006-08-20 22:20 ` Arjan van de Ven
0 siblings, 0 replies; 56+ messages in thread
From: Arjan van de Ven @ 2006-08-20 22:20 UTC (permalink / raw)
To: Andrea Arcangeli
Cc: David Woodhouse, Patrick McFarland, Anonymous User, linux-kernel
> My only worry is what's the legal status of the vsyscall if the only
> thing that matters is the COPYING file and not its generally agreed
> interpretation.
> -
I've yet to see a generally agreed interpretation on any kind of
exception to the COPYING file (afaik there is none), and if there's no
exception..... I don't think there's a generally agreed interpretation
on when exactly something becomes a derived work either. That is where
lawyers come in, and I suspect that it will even vary from country to
country to some degree, depending on the fine details on exactly how and
what you do. And since I'm not a lawyer, all I can say is: if you want
to live your life on that particular edge, make sure you talk to a good
lawyer or two (and most will give you the advice to really try hard to
not live on that edge, precisely because it's so unclear and varying on
jurisdiction) . Anything else you or I say on this topic is sort of
meaningless since neither of us are lawyers.
On the vsyscall page... I thought it was BSD licensed, and if not, it
probably should be, and I agree with you that that probably wants to be
made explicit somewhere if it's not already.
--
if you want to mail me at work (you don't), use arjan (at) linux.intel.com
^ permalink raw reply [flat|nested] 56+ messages in thread
* RE: GPL Violation?
2006-08-17 6:42 ` Patrick McFarland
` (2 preceding siblings ...)
2006-08-17 9:37 ` David Woodhouse
@ 2006-08-18 9:51 ` David Schwartz
2006-08-18 16:52 ` Alan Cox
3 siblings, 1 reply; 56+ messages in thread
From: David Schwartz @ 2006-08-18 9:51 UTC (permalink / raw)
To: Linux-Kernel@Vger. Kernel. Org
Combined responses.
> They don't have to release source code for any module you wrote
> from scratch
> themselves, but said modules cannot say they are GPL (ie, they
> have to poison
> the kernel).
Nonsense! You absolutely positively can lie about copyright (and even take
what would otherwise be protected by copyright) if the copyright notice or
statement itself is functional.
Otherwise, for example, a printer by Lexmark could require a poem with the
words 'Copyright, Lexmark Inc.' at the end to be in a chip in the printer
cartridge and refuse to work if it wasn't there. This would, if enforceable,
prevent anyone from making compatible cartridges.
The GPL notices that the Linux kernel uses to decide whether to taint or
allow access to GPL'd symbols are functional. The GPL prohibits the Linux
kernel from containing any license enforcement schemes (so do not even try
to argue that this is circumventing a license enforcement scheme). Which GPL
provision is being enforced?!
This is also true under the doctrine of scenes a faire, which basically
says, "when specific instructions are the only and essential means of
accomplishing a given task, their later use by another will not amount to
infringement" so if claiming you are GPL'd is the only way to accomplish a
given task (such as loading a module without poisoning the kernel), you
cannot use copyright to prevent the use of the instructions. (Similarly, if
taking the Linux kernel headers is the only practical way to make a Linux
kernel module, you can do so. Copyright does not cover the only way to
express an idea.)
IANAL. You should consult one if this matters to you in any significant
way.
Another caveat: If you need to access symbols marked GPL_ONLY, it is quite
likely that your module is in fact a derived work from the Linux kernel (as
it will contain details of its internals and not work without it). So you
wouldn't be able to distribute it without complying with the GPL anyway.
(There are legal arguments around this, mostly scenes a faire again, but you
would probably be quite foolish to rely on them as they are untested,
AFAIK.)
>It seems like the two issues that need to be addressed are:
>1) Are the kernel modules being developed derived works? If they are,
>they must be released along with the entire kernel source.
>2) If they are not derived works, and shipped in a product, does the
>fact that they are shipped in a product that uses the linux kernel
>require that the new modules be licensed under the GPL?
To 2, the answer is (I think) definitely no if you don't link anything
together on the medium, probably no if you do. It is my position that any
non-creative combination process is legally equivalent to mere aggregation,
with only a few specific exceptions set by statute. That is, linking two
works together does not create "a work" but two works that are linked
together. Therefore, it cannot create a derivative work, but two works each
with their own license. (Just like an ISO file of a CD with both GPL'd and
BSD-licensed code on it.)
To 1, the answer is that it's very hard to tell. My opinion is that it
almost definitely is notm assuming it doesn't include code taken from the
Linux kernel that isn't reasonably necessary to accomplish its function.
However, I strongly suggest that you try to convince the powers that be
that are they looking at this totally the wrong way. I don't know their
circumstances in enough detail to help you, but in many cases, releasing
more is more sensible than releasing less. Some of the benefits include more
value to the purchaser, the purchaser can contribute improvements back, the
purchaser can maintain the code. Goodwill is huge too. Also, there are a lot
of people on this list whose recommendation of your product may well hinge
on whether you are seen as predatory or cooperative.
If your company is not very well-known and your product is expensive,
knowing that I can maintain your product yourself may mean the difference
between being willing to pay for it and not willing to risk obsolesence. If
the product is at all aimed at experimenters, having the driver code makes
much more experimentation possible, increasing the value of your product.
Depending on the circumstances, many more such arguments may be made.
>However, the only valid license under which to distribute the Linux kernel
>is GPL. If the GPL prohibits linking in non-GPL code, and Linux adds no
>exception, then one clearly has no license to distribute Linux if they
>distribute it alongside code that links in to Linux and does not carry the
>GPL license.
The GPL cannot set its own scope and here you ask it to do just that. If
the GPL could specify how you could *use* covered works, then I could drop a
million copies of a poem from an airplane with a license that said anyone
had to pay me $25 if they read it.
>Both are fairly clear examples of GPL violations. The manufacturer has
>_not_ granted you the freedom to copy, modify and distribute all the
>Linux-based code in the device, as is required by the GPL.
Again, it doesn't matter what the GPL requires when the question is what is
or is not covered by the GPL. The GPL cannot set its own scope. The device
is not a work, it's an aggregation of multiple works and nothing requires
(or could require) they all be under the same license.
DS
^ permalink raw reply [flat|nested] 56+ messages in thread* RE: GPL Violation?
2006-08-18 9:51 ` David Schwartz
@ 2006-08-18 16:52 ` Alan Cox
2006-08-18 22:42 ` David Schwartz
0 siblings, 1 reply; 56+ messages in thread
From: Alan Cox @ 2006-08-18 16:52 UTC (permalink / raw)
To: davids; +Cc: Linux-Kernel@Vger. Kernel. Org
Ar Gwe, 2006-08-18 am 02:51 -0700, ysgrifennodd David Schwartz:
> Otherwise, for example, a printer by Lexmark could require a poem with the
> words 'Copyright, Lexmark Inc.' at the end to be in a chip in the printer
> cartridge and refuse to work if it wasn't there. This would, if enforceable,
> prevent anyone from making compatible cartridges.
True once upon a time (and people did this for IBM clone PC systems when
IBM tried that in graphics cards)
Once the phrase "Copyright, Lexamrk Inc." is checked to ascertain
permissions you are in the world of the EUCD and DMCA. You are
subverting a rights management system which places you on interestingly
vague ground.
EXPORT_SYMBOL_GPL is clearly a rights management systems. Thats one of
its little charms.
Alan
^ permalink raw reply [flat|nested] 56+ messages in thread
* RE: GPL Violation?
2006-08-18 16:52 ` Alan Cox
@ 2006-08-18 22:42 ` David Schwartz
2006-08-19 10:48 ` David Greaves
2006-08-19 11:30 ` Helge Hafting
0 siblings, 2 replies; 56+ messages in thread
From: David Schwartz @ 2006-08-18 22:42 UTC (permalink / raw)
To: alan; +Cc: Linux-Kernel@Vger. Kernel. Org
> Ar Gwe, 2006-08-18 am 02:51 -0700, ysgrifennodd David Schwartz:
Re the DMCA issues with printers, courts seem to be holding that the rights
management system has to enforce an actual right. Since a printer
manufacturer has no right to limit you to cartridges he makes, the DMCA does
not apply. (This would be very good if more courts would hold it more
consistenly on other issues as well. Sadly, that may not be happening.)
> EXPORT_SYMBOL_GPL is clearly a rights management systems. Thats one of
> its little charms.
No, it is not. If it was, it would violate the GPL. The GPL prohibits any
restrictions not contained in the GPL, and the GPL doesn't say anything
about EXPORT_SYMBOL_GPL. To the contrary, the GPL prohibits restrictions on
use. So EXPORT_SYMBOL_GPL violates the GPL if you are not free to circumvent
or remove it.
We had this same discussion a few years ago, and my recollection was that
you agreed that EXPORT_SYMBOL_GPL could not be a license enforcement scheme.
Which term of the GPL do you think it enforces exactly?
Whose rights does it enforce? (Considering that nobody has the right to
prevent me from using the Linux kernel with an undistributed derivative work
that is not covered by the GPL.)
DS
^ permalink raw reply [flat|nested] 56+ messages in thread
* Re: GPL Violation?
2006-08-18 22:42 ` David Schwartz
@ 2006-08-19 10:48 ` David Greaves
2006-08-19 16:29 ` Patrick McFarland
2006-08-19 11:30 ` Helge Hafting
1 sibling, 1 reply; 56+ messages in thread
From: David Greaves @ 2006-08-19 10:48 UTC (permalink / raw)
To: davids; +Cc: alan, Linux-Kernel@Vger. Kernel. Org
David Schwartz wrote:
>> Ar Gwe, 2006-08-18 am 02:51 -0700, ysgrifennodd David Schwartz:
>> EXPORT_SYMBOL_GPL is clearly a rights management systems. Thats one of
>> its little charms.
>
> No, it is not. If it was, it would violate the GPL. The GPL prohibits any
> restrictions not contained in the GPL, and the GPL doesn't say anything
> about EXPORT_SYMBOL_GPL. To the contrary, the GPL prohibits restrictions on
> use. So EXPORT_SYMBOL_GPL violates the GPL if you are not free to circumvent
> or remove it.
>
> We had this same discussion a few years ago, and my recollection was that
> you agreed that EXPORT_SYMBOL_GPL could not be a license enforcement scheme.
> Which term of the GPL do you think it enforces exactly?
I thought the EXPORT_SYMBOL_GPL had a role in rights _management_ insofar as it
would shows that anyone circumventing it took a conscious act to do so. This may
or may not be valuable in subsequent, possibly legal, discussions.
It's not a rights _enforcement_ scheme on it's own (presumably enforcement
would ultimately involve men with big sticks - aka the legal system). It simply
helps manage (GPL) rights.
David
^ permalink raw reply [flat|nested] 56+ messages in thread
* Re: GPL Violation?
2006-08-19 10:48 ` David Greaves
@ 2006-08-19 16:29 ` Patrick McFarland
2006-08-19 17:28 ` David Greaves
0 siblings, 1 reply; 56+ messages in thread
From: Patrick McFarland @ 2006-08-19 16:29 UTC (permalink / raw)
To: David Greaves; +Cc: davids, alan, Linux-Kernel@Vger. Kernel. Org
On Saturday 19 August 2006 06:48, David Greaves wrote:
> David Schwartz wrote:
> It's not a rights _enforcement_ scheme on it's own (presumably enforcement
> would ultimately involve men with big sticks - aka the legal system). It
> simply helps manage (GPL) rights.
Then how is it not a rights enforcement scheme? It helps me enforce the GPL
(see Helge Hafting's post: http://lkml.org/lkml/2006/8/19/50 for example
why).
--
Patrick McFarland || www.AdTerrasPerAspera.com
"Computer games don't affect kids; I mean if Pac-Man affected us as kids,
we'd all be running around in darkened rooms, munching magic pills and
listening to repetitive electronic music." -- Kristian Wilson, Nintendo,
Inc, 1989
^ permalink raw reply [flat|nested] 56+ messages in thread
* Re: GPL Violation?
2006-08-19 16:29 ` Patrick McFarland
@ 2006-08-19 17:28 ` David Greaves
0 siblings, 0 replies; 56+ messages in thread
From: David Greaves @ 2006-08-19 17:28 UTC (permalink / raw)
To: Patrick McFarland; +Cc: davids, alan, Linux-Kernel@Vger. Kernel. Org
Patrick McFarland wrote:
> On Saturday 19 August 2006 06:48, David Greaves wrote:
>> David Schwartz wrote:
>> It's not a rights _enforcement_ scheme on it's own (presumably enforcement
>> would ultimately involve men with big sticks - aka the legal system). It
>> simply helps manage (GPL) rights.
>
> Then how is it not a rights enforcement scheme? It helps me enforce the GPL
> (see Helge Hafting's post: http://lkml.org/lkml/2006/8/19/50 for example
> why).
Semantics - I think we agree:
See where I said "not ... on it's own" and "It simply helps manage rights".
Well that equates with your statement where you accept that you are the enforcer
and this tool is an aide: "It _helps_ _me_ enforce the GPL".
As Helge says:
It is still a rights management system, even if it isn't
forced upon the users.
Which is what I meant - it's trivial to bypass - unlike some rights management
systems which are intrusive and designed to be hard to bypass. If it was
designed to be hard to bypass and actually worked (ie the deviant developer
couldn't simply lie) then it would be an enforcement system. As it is it wasn't
designed to enforce (it's bloody hard to design an open source system that you
can't work around - Tivo did it - hence GPLv3... but let's not <grin>)
The DVD's CSS and Macrovision OTOH were designed to be enforcement systems (not
perfect and lots of arguments that they hurt the wrong people and don't stop
pirates but...)
This tool/system serves to state one (- not the only) boundary that the
copyright owners feel strongly about and it clearly communicates that boundary
to other developers. It's like a "Private Property - No Trespassing" sign - if
you have a big glowing one then people later find it harder to argue that they
didn't know or that there was an implicit invitation because the gate was open...
David
--
^ permalink raw reply [flat|nested] 56+ messages in thread
* Re: GPL Violation?
2006-08-18 22:42 ` David Schwartz
2006-08-19 10:48 ` David Greaves
@ 2006-08-19 11:30 ` Helge Hafting
2006-08-19 15:44 ` Michael Buesch
` (2 more replies)
1 sibling, 3 replies; 56+ messages in thread
From: Helge Hafting @ 2006-08-19 11:30 UTC (permalink / raw)
To: David Schwartz; +Cc: alan, Linux-Kernel@Vger. Kernel. Org
On Fri, Aug 18, 2006 at 03:42:10PM -0700, David Schwartz wrote:
>
> > Ar Gwe, 2006-08-18 am 02:51 -0700, ysgrifennodd David Schwartz:
>
> Re the DMCA issues with printers, courts seem to be holding that the rights
> management system has to enforce an actual right. Since a printer
> manufacturer has no right to limit you to cartridges he makes, the DMCA does
> not apply. (This would be very good if more courts would hold it more
> consistenly on other issues as well. Sadly, that may not be happening.)
>
> > EXPORT_SYMBOL_GPL is clearly a rights management systems. Thats one of
> > its little charms.
>
> No, it is not. If it was, it would violate the GPL. The GPL prohibits any
> restrictions not contained in the GPL, and the GPL doesn't say anything
> about EXPORT_SYMBOL_GPL. To the contrary, the GPL prohibits restrictions on
> use. So EXPORT_SYMBOL_GPL violates the GPL if you are not free to circumvent
> or remove it.
>
> We had this same discussion a few years ago, and my recollection was that
> you agreed that EXPORT_SYMBOL_GPL could not be a license enforcement scheme.
> Which term of the GPL do you think it enforces exactly?
>
> Whose rights does it enforce? (Considering that nobody has the right to
> prevent me from using the Linux kernel with an undistributed derivative work
> that is not covered by the GPL.)
Unlike other rights management systems you are allowed to circumvent or
remove the EXPORT_SYMBOL_GPL mechanism. The GPL lets you.
It is still a rights management system, even if it isn't
forced upon the users.
Now, if someone actually distributes a closed-source module that
circumvents EXPORT_SYMBOL_GPL, or relies on an accompagnying
open source patch that removes the mechanism, this happens:
1. By doing this, they clearly showed that their module is outside the
gray area of "allowed binary-only modules". They definitively
made a "derived work" and distributed it.
2. Anybody who received this module may now invoke the GPL
(and the force of law, if necessary) to extract the
module source code from the maker. And then this source
can be freely redistributed to all interested.
The vendor will be powerless to stop this, no amount of "third
party" patents / trade secrets / intellectual property
inside that module source can prevent its opening. The
module vendor broke all of that the moment they distributed
this nasty module, and set themselves up for this. The vendor
is then the one who have to pay these third parties for
opening their source. They must bear the cost of
free licences for all on any third-party copyright.
Any _patented_ stuff may still be covered
of course, making the source less useable. But the "trade secrets"
broke at the point of distributing a module with the GPL workaround.
So the rights management system works really well - it provides an
enforceable "the price for using these symbols is your code".
Sure, they can patch out the mechanism, but doing so will force them
to hand over the code, and then the module will be trivially rewritten
in a more appropriate way. I.e. now that it is open, it can
use the GPL symbols without any workaround.
The mechanism itself is not protected by laws like the DMCA, because
its removal is explicitly allowed. The great thing is, protection
of the _content_ is not lost when this happens.
The same applies to everything else - before the DMCA, you could
legally break any copy protection scheme. The content was still
protected by law. In our case, enforcing it is easier though.
Helge Hafting
^ permalink raw reply [flat|nested] 56+ messages in thread* Re: GPL Violation?
2006-08-19 11:30 ` Helge Hafting
@ 2006-08-19 15:44 ` Michael Buesch
2006-08-19 23:01 ` David Schwartz
2006-08-20 3:20 ` Chase Venters
2 siblings, 0 replies; 56+ messages in thread
From: Michael Buesch @ 2006-08-19 15:44 UTC (permalink / raw)
To: Helge Hafting; +Cc: David Schwartz, alan, Linux-Kernel@Vger. Kernel. Org
On Saturday 19 August 2006 13:30, Helge Hafting wrote:
> 2. Anybody who received this module may now invoke the GPL
> (and the force of law, if necessary) to extract the
> module source code from the maker. And then this source
> can be freely redistributed to all interested.
Not "Anybody" but only the Copyright Holder of the GPL
code can do that. That's exactly why the FSF requires
to transfer the copyright to FSF before code contribution.
--
Greetings Michael.
^ permalink raw reply [flat|nested] 56+ messages in thread
* RE: GPL Violation?
2006-08-19 11:30 ` Helge Hafting
2006-08-19 15:44 ` Michael Buesch
@ 2006-08-19 23:01 ` David Schwartz
2006-08-20 3:20 ` Chase Venters
2 siblings, 0 replies; 56+ messages in thread
From: David Schwartz @ 2006-08-19 23:01 UTC (permalink / raw)
To: Linux-Kernel@Vger. Kernel. Org
> Now, if someone actually distributes a closed-source module that
> circumvents EXPORT_SYMBOL_GPL, or relies on an accompagnying
> open source patch that removes the mechanism, this happens:
> 1. By doing this, they clearly showed that their module is outside the
> gray area of "allowed binary-only modules". They definitively
> made a "derived work" and distributed it.
How do you figure? This seems to me to be an amazing leap with no rationale
of any kind to justify it.
> 2. Anybody who received this module may now invoke the GPL
> (and the force of law, if necessary) to extract the
> module source code from the maker. And then this source
> can be freely redistributed to all interested.
A trivial patch to the kernel just to remove a deliberate incompatibility
isn't sufficient alone to change the status of the module. The patch to
remove EXPORT_SYMBOL_GPL could even be developed by a completely different
group of people from the kernel module, with no overlap of any kind, so it
is absurd to say that the kernel patch somehow changes the status of the
module.
To give you an analogy, suppose I made a closed-source filesystem for
FreeBSD. Somebody made a patch to the Linux kernel to allow it to emulate
the BSD filesystem interface well enough that with that patch, Linux can use
my module. By any stretch of the imagination, can this Linux patch change
the copyright status of my module, given that it was developed by different
people?
Yes, the patch to modify the kernel is clearly a derivative work, but the
module the patch is needed for is still not if it wasn't before.
In fact, any arguments you could make before, you can still make. But no
new ones arise. For example, if you could argue that the kernel and the
module were too tightly integrated in their design to be considered separate
works or that the module includes too much of the kernel, you still can. But
those are the arguments you'd need to make, and needing a kernel patch that
is independent of the module (authorwise) doesn't strengthen any of them.
> So the rights management system works really well - it provides an
> enforceable "the price for using these symbols is your code".
It can't do that. The module must be GPL'd if and only if it's a derivative
work of the Linux kernel. This has to do with whether it contains portions
of the Linux kernel beyond what is covered by things like fair use and
scenes a faire. How does EXPORT_SYMBOL_GPL change that?
> The mechanism itself is not protected by laws like the DMCA, because
> its removal is explicitly allowed. The great thing is, protection
> of the _content_ is not lost when this happens.
Huh?
I do agree with the point that you do need to explicitly act to circumvent
EXPORT_MODULE_GPL and that pointing out that you did that may be helpful in
subsequent legal fights that may arise. But I don't think anyone today can
specify precisely how. (Perhaps if someone claimed they had no idea that
they might be making their module a derivative work, that they must have
known could affect a damage award.)
DS
^ permalink raw reply [flat|nested] 56+ messages in thread
* Re: GPL Violation?
2006-08-19 11:30 ` Helge Hafting
2006-08-19 15:44 ` Michael Buesch
2006-08-19 23:01 ` David Schwartz
@ 2006-08-20 3:20 ` Chase Venters
2006-08-21 7:58 ` Helge Hafting
2 siblings, 1 reply; 56+ messages in thread
From: Chase Venters @ 2006-08-20 3:20 UTC (permalink / raw)
To: Helge Hafting; +Cc: David Schwartz, alan, Linux-Kernel@Vger. Kernel. Org
On Saturday 19 August 2006 06:30, Helge Hafting wrote:
> Now, if someone actually distributes a closed-source module that
> circumvents EXPORT_SYMBOL_GPL, or relies on an accompagnying
> open source patch that removes the mechanism, this happens:
>
> 1. By doing this, they clearly showed that their module is outside the
> gray area of "allowed binary-only modules". They definitively
> made a "derived work" and distributed it.
>
> 2. Anybody who received this module may now invoke the GPL
> (and the force of law, if necessary) to extract the
> module source code from the maker. And then this source
> can be freely redistributed to all interested.
Actually, you can't just force the vendor to open up all of their source code.
The GPL isn't a contract - it's a license. If a vendor makes a derived work
from the Linux kernel and does not GPL-license said derived work, they are
indeed violating copyright as the license the GPL provides no longer supports
their ability to redistribute.
However, the court decides what happens to the vendor. The court might force
the vendor to open up their code, but to my knowledge this would be breaking
brand new ground. I think it is more likely that the plaintiff could be
awarded monetary damages and the defendant enjoined from further
redistribution.
The charge is not "violating the GPL" (since the GPL is not a contract) --
it's distributing copyrighted materials without a license. See Eben Moglen's
discussion on this subject for more details.
Thanks,
Chase
^ permalink raw reply [flat|nested] 56+ messages in thread
* Re: GPL Violation?
2006-08-20 3:20 ` Chase Venters
@ 2006-08-21 7:58 ` Helge Hafting
2006-08-21 11:27 ` Stefan Richter
` (2 more replies)
0 siblings, 3 replies; 56+ messages in thread
From: Helge Hafting @ 2006-08-21 7:58 UTC (permalink / raw)
To: Chase Venters
Cc: Helge Hafting, David Schwartz, alan,
Linux-Kernel@Vger. Kernel. Org
Chase Venters wrote:
> On Saturday 19 August 2006 06:30, Helge Hafting wrote:
>
>> Now, if someone actually distributes a closed-source module that
>> circumvents EXPORT_SYMBOL_GPL, or relies on an accompagnying
>> open source patch that removes the mechanism, this happens:
>>
>> 1. By doing this, they clearly showed that their module is outside the
>> gray area of "allowed binary-only modules". They definitively
>> made a "derived work" and distributed it.
>>
>> 2. Anybody who received this module may now invoke the GPL
>> (and the force of law, if necessary) to extract the
>> module source code from the maker. And then this source
>> can be freely redistributed to all interested.
>>
>
> Actually, you can't just force the vendor to open up all of their source code.
Not all their source of course, just the source for the derived work.
I.e. we'll get their driver, but not anything else they might have.
>
> The GPL isn't a contract - it's a license. If a vendor makes a derived work
> from the Linux kernel and does not GPL-license said derived work, they are
> indeed violating copyright as the license the GPL provides no longer supports
> their ability to redistribute.
>
> However, the court decides what happens to the vendor. The court might force
> the vendor to open up their code, but to my knowledge this would be breaking
> brand new ground. I think it is more likely that the plaintiff could be
> awarded monetary damages and the defendant enjoined from further
> redistribution.
>
Yes the GPL is a licence. By using the code, they have accepted
the licence. If I use a copy of windows, I'll be forced to pay.
The reason courts usually award monetary damages is that
money is what almost everybody wants. Commercial software,
books, CDs, DVSs are all traded for money, so copying one
means you must pay the copyright holder's loss.
The GPL should work exactly the same way: You distribute
software derived from GPL software, you pay the usual price.
But the usual price for GPLed software is not money,
the usual price is the derived source.
That is what IBM pays when porting linux to their processors,
that is what various hardware vendors pay when they make an
open driver based on small changes to existing drivers.
And that is how I believe a vendor should be forced to pay,
should he have the nerve to distribute a driver that blatantly
works around the EXPORT_SYMBOL_GPL mechanism.
> The charge is not "violating the GPL" (since the GPL is not a contract) --
> it's distributing copyrighted materials without a license. See Eben Moglen's
> discussion on this subject for more details.
>
Interesting text. Seems the FSF takes a 'nicer' approach, and that
works well enough. Still, if someone tries to be difficult, I hope
they'll be forced to pay the usual price - which isn't money.
It'd be hard to set a price anyway, given that GPL software
isn't usually sold. The price of having a professional programmer
developing the same driver perhaps?
Helge Hafting
^ permalink raw reply [flat|nested] 56+ messages in thread* Re: GPL Violation?
2006-08-21 7:58 ` Helge Hafting
@ 2006-08-21 11:27 ` Stefan Richter
2006-08-21 13:06 ` Alan Cox
2006-08-21 14:59 ` Horst H. von Brand
2 siblings, 0 replies; 56+ messages in thread
From: Stefan Richter @ 2006-08-21 11:27 UTC (permalink / raw)
To: Helge Hafting
Cc: Chase Venters, Helge Hafting, David Schwartz, alan, linux-kernel
Helge Hafting wrote:
[...]
> Yes the GPL is a licence. By using the code, they have accepted
> the licence. If I use a copy of windows, I'll be forced to pay.
> The reason courts usually award monetary damages is that
> money is what almost everybody wants. Commercial software,
> books, CDs, DVSs are all traded for money, so copying one
> means you must pay the copyright holder's loss.
>
> The GPL should work exactly the same way: You distribute
> software derived from GPL software, you pay the usual price.
> But the usual price for GPLed software is not money,
> the usual price is the derived source.
[...]
> if someone tries to be difficult, I hope
> they'll be forced to pay the usual price - which isn't money.
> It'd be hard to set a price anyway, given that GPL software
> isn't usually sold. The price of having a professional programmer
> developing the same driver perhaps?
There may also be damage due to unfair competition. But then the
plaintiff probably had to be a competitor (or perhaps a body that is
generally entitled to go against unfair competition, if such a body
exists anywhere). The copyright holders of relevant parts of Linux may
sometimes not be competitors to the violator.
--
Stefan Richter
-=====-=-==- =--- =-=-=
http://arcgraph.de/sr/
^ permalink raw reply [flat|nested] 56+ messages in thread
* Re: GPL Violation?
2006-08-21 7:58 ` Helge Hafting
2006-08-21 11:27 ` Stefan Richter
@ 2006-08-21 13:06 ` Alan Cox
2006-08-21 14:59 ` Horst H. von Brand
2 siblings, 0 replies; 56+ messages in thread
From: Alan Cox @ 2006-08-21 13:06 UTC (permalink / raw)
To: Helge Hafting
Cc: Chase Venters, Helge Hafting, David Schwartz,
Linux-Kernel@Vger. Kernel. Org
Ar Llu, 2006-08-21 am 09:58 +0200, ysgrifennodd Helge Hafting:
> > brand new ground. I think it is more likely that the plaintiff could be
> > awarded monetary damages and the defendant enjoined from further
> > redistribution.
That is the history with gpl-violations.org, although almost everyone
has settled out of court.
> The reason courts usually award monetary damages is that
> money is what almost everybody wants. Commercial software,
I've no idea about Norway but in the UK and US money is just a
convenient shorthand for transferring and measuring the harm caused by
the action in accordance with civil law rules on equity. In some
countries large scale commercial copyright violation is also a criminal
offence.
> It'd be hard to set a price anyway, given that GPL software
> isn't usually sold. The price of having a professional programmer
> developing the same driver perhaps?
A good US lawyer would no doubt ask for the cost of developing an
equivalent open source driver, reverse engineering, and lost
opportunities caused by the time this will take, trebled for being
intentional, and class action on behalf of all the rights-holders.
What a court would award is unknown, there is AFAIK no useful US caselaw
on either class action copyright infringement suits or GPL violation
penalties.
Alan
^ permalink raw reply [flat|nested] 56+ messages in thread
* Re: GPL Violation?
2006-08-21 7:58 ` Helge Hafting
2006-08-21 11:27 ` Stefan Richter
2006-08-21 13:06 ` Alan Cox
@ 2006-08-21 14:59 ` Horst H. von Brand
2 siblings, 0 replies; 56+ messages in thread
From: Horst H. von Brand @ 2006-08-21 14:59 UTC (permalink / raw)
To: Helge Hafting
Cc: Chase Venters, Helge Hafting, David Schwartz, alan,
Linux-Kernel@Vger. Kernel. Org
Helge Hafting <helge.hafting@aitel.hist.no> wrote:
> Chase Venters wrote:
> > On Saturday 19 August 2006 06:30, Helge Hafting wrote:
> >
> >> Now, if someone actually distributes a closed-source module that
> >> circumvents EXPORT_SYMBOL_GPL, or relies on an accompagnying
> >> open source patch that removes the mechanism, this happens:
> >>
> >> 1. By doing this, they clearly showed that their module is outside the
> >> gray area of "allowed binary-only modules". They definitively
> >> made a "derived work" and distributed it.
> >>
> >> 2. Anybody who received this module may now invoke the GPL
> >> (and the force of law, if necessary) to extract the
> >> module source code from the maker. And then this source
> >> can be freely redistributed to all interested.
> >>
> > Actually, you can't just force the vendor to open up all of their
> > source code.
> Not all their source of course, just the source for the derived work.
Not even that.
> I.e. we'll get their driver, but not anything else they might have.
You could perhaps get the driver.
> > The GPL isn't a contract - it's a license. If a vendor makes a
> > derived work from the Linux kernel and does not GPL-license said
> > derived work, they are indeed violating copyright as the license the
> > GPL provides no longer supports their ability to redistribute.
> >
> > However, the court decides what happens to the vendor. The court
> > might force the vendor to open up their code, but to my knowledge
> > this would be breaking brand new ground. I think it is more likely
> > that the plaintiff could be awarded monetary damages and the
> > defendant enjoined from further redistribution.
> Yes the GPL is a licence. By using the code, they have accepted
> the licence.
No. GPL kicks in when they distribute code.
> If I use a copy of windows, I'll be forced to pay.
Windows is under a different "license" (they try to make it a contract,
which is another kettle of fish altogether, so don't go there).
> The reason courts usually award monetary damages is that
> money is what almost everybody wants.
They tell the offender to pay the owner for the actual damages they
suffered, and perhaps a punishment on top. If Bad Corp distributes my code,
which I don't make money off by virtue of distributing it GPLed, there are
no damages that I could ask to be restituted to me. If I write a book and
keep in to myself in my drawer, you grab a copy and publish it on the
Internet, no judge will ask you to pay damages as if it was the loss of
revenue for history's best selling bestseller.
In any case this is wildly off-topic here, so take your comments
elsewhere. If you want to know what really happens here, talk to a lawyer
or visit sites clueful on the matter and learn.
--
Dr. Horst H. von Brand User #22616 counter.li.org
Departamento de Informatica Fono: +56 32 654431
Universidad Tecnica Federico Santa Maria +56 32 654239
Casilla 110-V, Valparaiso, Chile Fax: +56 32 797513
^ permalink raw reply [flat|nested] 56+ messages in thread