Control: tags -1 pending

Hello,

On Sat, 2 Jan 2021 18:47:07 +0100 Bastian Germann wrote:
> This package depends on libreadline8 which is GPL-3+ licensed. According 
> to debian/copyright parts of your package are GPL-2-only licensed. If 
> that is also (transitively) the case for the binaries that link with 
> libreadline.so.8 it might be legally problematic (see 
> https://www.gnu.org/licenses/gpl-faq.html#AllCompatibility).

Since enlightenment Build-Depends on connman, I took a look.  I think this
isn't actually a problem. 

According to the docs, readline is only used in the cli client.  I confirmed in
a fresh sid container:

  # dpkg -l connman*
  Desired=Unknown/Install/Remove/Purge/Hold
  | Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
  |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
  ||/ Name              Version                     Architecture Description
  
+++-=================-===========================-============-===================================================
  ii  connman           1.36-2.2                    amd64        Intel 
Connection Manager daemon
  ii  connman-dev:amd64 1.36-2.2                    amd64        Development 
files for connman
  ii  connman-doc       1.36-2.2                    all          ConnMan 
documentation
  ii  connman-vpn       1.36-2.2                    amd64        Intel 
Connection Manager daemon - VPN daemon
  root@b7aa1f65ab2d:/# for i in $(dpkg -l connman* | grep connman | awk '{print 
$2}'); do dpkg -L $i | xargs ldd 2> /dev/null | grep -E '(^/)|libreadline'; 
done | grep -B 1 readline
  /usr/bin/connmanctl:
          libreadline.so.8 => /lib/x86_64-linux-gnu/libreadline.so.8 
(0x00007f3b73d8b000)

Upstream relicensed the client source to GPL v2 or later in 27e37a50
specifically to address this issue [1].  That change was released in 1.10, but
d/copyright does not reflect it.

I've opened an MR with the fix at [2], but need a sponsor to upload since I'm
DN.  Since the uploader and maintainer have been inactive for some years, and
since this bug has had no reply since January, I'll open a sponsorship request
bug today.

[1] - 
https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=27e37a50f35cc54c266cbd37e32dadbf3016e5e8
 
[2] - https://salsa.debian.org/debian/connman/-/merge_requests/6

Ross

Reply via email to