Is Alpine non-free software?

10 respostas [Última entrada]
roboq6
Desconectado
Joined: 05/03/2013

https://savannah.nongnu.org/bugs/?34215

But:

cat /usr/share/doc/alpine/copyright

Copyright © 2006 University of Washington

License:
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.

roboq6
Desconectado
Joined: 05/03/2013

By the way, Trisquel repository have Alpine.

jamathis

I am a member!

Desconectado
Joined: 04/25/2013

According to the FSF list of licenses Apache 2.0 is a free software license.

http://www.gnu.org/licenses/license-list.html#apache2

However, it is not compatible with GPLv2 only GPLv3.

Cyberhawk

I am a translator!

Desconectado
Joined: 07/27/2010

Jxself is on this forum too, he should be able clarify the issue. Maybe he actually looked at the sourcecode and found some pieces of binary hidden in there?

lembas
Desconectado
Joined: 05/13/2010

I can find the offending file here http://archive.trisquel.info/trisquel/pool/main/a/alpine/alpine_2.02.orig.tar.gz

in pico/msmem.c

So I filed https://trisquel.info/en/issues/8707

(As stated in the Debian bug it's in the source code for windoze only however, so the binary is clean FWIW.)

jxself
Desconectado
Joined: 09/13/2010

Thanks lembas. This is precisely why you can't rely on just looking at a software license alone to know if something is free software, but also need to go spelunking through everything and looking to see what's there.

As an example: If you look *only* at software licenses and nothing else you might conclude that the kernel called Linux is free software because you don't go looking through the source code and don't find all of those problematic parts that Linux-libre rips out.

I do it to help GNU/Linux distros be committed to freedom, which is one of the FSF's high priority projects:

http://www.fsf.org/campaigns/priority-projects/priority-projects/highpriorityprojects#freedom

Anyone should feel free to join in if they're interested.

jxself
Desconectado
Joined: 09/13/2010

Another reason not to rely on just the high-level copyright and license info is that it may not be accurate:

roboq6, for example, points to "Copyright © 2006 University of Washington" and "Licensed under the Apache License, Version 2.0" but I can point to two things that show this information doesn't provide an accurate picture of the copyright holder and the license:

1. alpine-2.00/pico/msmem.c says it's copyrighted by Stephen Chung, *not* the University of Washington.

2. It uses a different license (not the Apache license) that says:

"Theoretically, you are required to obtain special approval from me (because I copyrighted these routines) if you want to use them in your programs. However, I usually don't really care if you are not using these routines in a commercial, shareware etc. product."

So, seeing that copyright statement & license notice that roboq6 quoted doesn't give you the complete picture of all of the copyright holders and licenses in effect for the program. You need to review everything to get a complete picture. There are programs to help with this kind of analysis.

So, in the end, it wasn't a binary blob as Cyberhawk thought but source code with a different license.

What Stephen Chung said is problematic because:
1. He indicated permission wasn't needed was long as it wasn't used commercially. According to the FSF's free software definition, "a free program must be available for commercial use, commercial development, and commercial distribution."

2. He refers to obtaining special approval to do that. In the FSF's free software definition, "being free to do these things means (among other things) that you do not have to ask or pay for permission to do so."

roboq6
Desconectado
Joined: 05/03/2013

1. jxself, are you trying to contact with Stephen Chung?
Maybe we can convince him to change the license

2."As stated in the Debian bug it's in the source code for windoze only however, so the binary is clean "
Is that true? If yes, we are can simply get rid of msmem.c

jxself
Desconectado
Joined: 09/13/2010

name at domain wrote ..
> 1. jxself, are you trying to contact with Stephen Chung?
> Maybe we can convince him to change the license

I have not. Please feel free to do so.

> 2."As stated in the Debian bug it's in the source code for windoze
only
> however, so the binary is clean "
> Is that true? If yes, we are can simply get rid of msmem.c

Indeed.

roboq6
Desconectado
Joined: 05/03/2013

"Indeed"
Then why are you removed Alpine from gNewSense?

jxself
Desconectado
Joined: 09/13/2010

I am not sure that I understand your question. While wearing my "freedom verifier" hat I only report what I find to the distro. What happens after that is up to them.