On 10/28/2023 7:51 AM, Laszlo Ersek wrote:
On 10/27/23 23:11, Michael Kubacki wrote:
I'd like to bring attention to Apache License 2.0 code in the CodeQL
series I sent to the mailing list for steward review.

In particular, the files in the BaseTools/Plugin/CodeQL/analyze
directory of this patch:

https://edk2.groups.io/g/devel/message/109696

Please let me know if any next steps are needed.

(1) I don't know if edk2 accepts contributions under Apache License 2.0;
just want to point out that this license is acceptable in Fedora (and so
RHEL too), per
<https://docs.fedoraproject.org/en-US/legal/allowed-licenses/>. Assuming
we're talking about "Apache Software License 2.0".

A few submodules are using the Apache License 2.0.

For example, OpenSSL v3:

- https://www.openssl.org/source/license.html
- https://git.openssl.org/?p=openssl.git;a=blob_plain;f=LICENSE.txt;hb=HEAD

And cmoocka:

- https://gitlab.com/cmocka/cmocka/-/blob/master/COPYING

I'm unaware if there was precedent specific to submodules, but I'd expect terms like redistribution clauses to already apply regardless of tooling used to acquire the source code into the project.

(2) Should we extend "License Details" and "Code Contributions" in
"ReadMe.rst"?

My initial thought was to add the path (BaseTools\Plugin\CodeQL\analyze) to "License Details".

Was that all that you had in mind or to elaborate further in that section on the licenses used/allowed?

(3) Should the new files (under Apache License 2.0) use an SPDX
identifier tag, for easy greppability?

I'd be happy to add that.

(4) With the addition, downstream packages (such as RPMs in Fedora and
RHEL) might want to spell out the short SPDX identifier of the new
license too in their License: tags.

Laszlo







-=-=-=-=-=-=-=-=-=-=-=-
Groups.io Links: You receive all messages sent to this group.
View/Reply Online (#110433): https://edk2.groups.io/g/devel/message/110433
Mute This Topic: https://groups.io/mt/102230244/21656
Group Owner: devel+ow...@edk2.groups.io
Unsubscribe: https://edk2.groups.io/g/devel/unsub [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-


Reply via email to