Andres Salomon <[EMAIL PROTECTED]> wrote:
>ntp 4.2.1rc1 was released in March (see
>http://lists.ntp.isc.org/pipermail/announce/2006-March/000012.html).
>Looking through that, we see that:
....a lot of stuff has been fixed. :-) Good to hear. The licensing
from Frank Kardel fixes nearly everything we actually *use*.
Summary of current status when the new upstream is packaged:
(1) The following files in the upstream source, unused, should
most likely be removed from the Debian source tarball.
-- arlib/* (unused, non-distributable license)
-- html/build/hints/solaris-dosynctodr.html (useless on Linux,
pilfered from webpage, no license)
(2) The following files still have license problems
(quoting Andres Salomon)
>libntp/adjtime.c is
>copyrighted by many people. This file is actually pretty
>problematic; the HPUX adjtime implementation is copyrighted
>Tai Jin (and is ok, but should be mentioned in the copyright
>file), but the QNX adjtime implementation is copyright Chris
>Burghart, and has no license (and is therefore
>non-distributable).
(Quoting Bdale Garbee)
>The file include/global.h has an RSA copyright assertion with "all
>rights reserved" and no other grant. However, the files that include it
>clearly came from the rsaref2.0 package, which has a BSD-like license
>with advertising clause. I believe this header file also was part of
>that package and therefore covered by the same RSA license terms.
>Therefore, I suggest the copyright and license terms from libntp/md5c.c
>should be added to debian/copyright to cover all inclusions from
>rsaref2.0.
(3) The following files which were not previously identified have
license problems:
include/rsa_md5.h has an "obnoxious advertising clause" of
an extra-obnoxious variety:
> License to copy and use this software is granted provided that it
> is identified as the "RSA Data Security, Inc. MD5 Message-Digest
> Algorithm" in all material mentioning or referencing this software
> or this function.
>
> License is also granted to make and use derivative works provided
> that such works are identified as "derived from the RSA Data
> Security, Inc. MD5 Message-Digest Algorithm" in all material
> mentioning or referencing the derived work.
This is really over the top. "All material mentioning or referencing"?
Debian's not doing this. Surely this can be replaced with a workalike
header file, though?
Bare copyright notices, without licenses, other than those of David
Mills, show up in the following files (all of which appear to be
irrelevant to Linux and Debian):
include/timepps-SCO.h
include/timepps-Solaris.h
include/timepps-SunOS.h
kernel/tty_chu_STREAMS.c (I think this Sun/Solaris only)
ports/winnt/libntp/messages.mc
ports/winnt/include/hopf_PCI_io.h
There are bare copyright notices without licenses in the following
files which appear relevant to Debian:
libparse/clk_wharton.c
ntpd/refclock_neoclock4x.c
scripts/ntpver.in -- trivial file
scripts/monitoring/lr.pl
scripts/monitoring/ntp.pl
scripts/monitoring/ntploopstat
scripts/monitoring/ntploopwatch
scripts/monitoring/ntptrap
The stuff in scripts is copyright either
Rainer Pruy, Friedrich-Alexander Universitaet Erlangen-Nuernberg
or
Ulrich Windl
or both, with one bit copyright Frank Kardel
The files libparse/clk_wharton.c and ntpd/refclock_neoclock4x.c
are copyright Philippe De Muyter <[EMAIL PROTECTED]>, who included
a warranty disclaimer, but no license.
Hopefully the authors of these can be found and will be happy
to license the files.
That's it; every other file has been mentioned previously by either
Bdale or Andres.
(4) There are some substantial updates needed to debian/copyright.
I'd be happy to do this once (1), (2), and (3) are dealt with.
--
Nathanael Nerode <[EMAIL PROTECTED]>
Bush admitted to violating FISA and said he was proud of it. So
why isn't he in prison yet?...
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
