I think we'll start experimenting with 1+2, it sounds great! Thanks many.

Best,
Martin

 

> -----Alkuperäinen viesti-----
> Lähettäjä: Gobeille, Robert [mailto:bob.gobei...@hp.com]
> Lähetetty: 16. maaliskuuta 2010 18:20
> Vastaanottaja: Martin von Willebrand
> Kopio: fossology@fossology.org
> Aihe: Re: VS: [FOSSology] Identifiying binary files in source packages
> 
> Hi Martin,
> 
> Here are a few possibilities:
> 
> 1) in V 1.2 you can select all the files where no license was detected.
> 
> 2) Combine 1) with another feature in V 1.2 where when you get the list of
> files with a given license (e.g. No License Found) you have the option to
> exclude file types.  In this case you would exclude each non-binary type.
> For example, you could exclude ".txt", then exclude ".c", ...
> 
> 3) The mimetype agent records the mimetype ("text/html", "text/plain",
> "application/octet-stream", "image/tiff", ...), one could select all the
> files with mimetypes one is interested in, but there is no user interface
> to do this.  Also, there are a lot of mimetypes (284) in the current
> version.
> 
> Does 1 or 1+2 above meet your needs?
> 
> Bob Gobeille
> 
> On Mar 16, 2010, at 3:49 AM, Martin von Willebrand wrote:
> 
> > Hi Bob,
> > I wasn't actually that far (you're thinking the next step). I was
> wondering a simple way to just recognise that the package contains
> binaries and points to/lists the binary-files. ("Hey there were also some
> binaries, and many times license info is dropped in compilation so you
> might want to do some additional diligence on the binaries.")
> >
> > The next step is then to start analysing the binaries. Attaching
> binaries to sources / or signatures, which then in turn are attached to
> licenses.
> >
> > But just getting the info on whether binaries exist in a package or not,
> is the start. I was actually asking that very first step, although the
> next step is obviously even more interesting, even though it probably
> cannot be answered very fast.
> >
> > Martin
> >
> >
> >> -----Alkuperäinen viesti-----
> >> Lähettäjä: Gobeille, Robert [mailto:bob.gobei...@hp.com]
> >> Lähetetty: 15. maaliskuuta 2010 16:06
> >> Vastaanottaja: Martin von Willebrand
> >> Kopio: fossology@fossology.org
> >> Aihe: Re: [FOSSology] Identifiying binary files in source packages
> >>
> >> Hi Martin,
> >> Fossology does look for license strings inside of binaries, but I think
> >> what you are asking for is to recognize which binaries came from what
> >> source and report those licenses.  Is that it?  Another way to do this
> is
> >> to create symbol libraries to build up signatures that identify
> components
> >> in a library.  I have been talking to someone who might be interested
> in
> >> doing that but even if they would do it, it would not be available for
> a
> >> while.
> >>
> >> Did you have something specific in mind?
> >>
> >> Bob Gobeille
> >>
> >>
> >> On Mar 15, 2010, at 5:42 AM, Martin von Willebrand wrote:
> >>
> >> Hi All
> >>
> >> Sometimes (repeatedly enough) source packages include binaries.
> Typically
> >> external libraries, and quite often in the folder /lib/, but also
> >> elsewhere. For compliance review these present a challenge since no
> text-
> >> matches are found. Fossology obviously can't find any text-matches.
> >>
> >> The first step is to realise that the package contains binaries. Is
> this
> >> info something that would be easily available in Fossology?
> >

_______________________________________________
fossology mailing list
fossology@fossology.org
http://fossology.org/mailman/listinfo/fossology

Reply via email to