Bug#794955: gperf: Embedded code copy with missing copyright
Hi, On 08/08/2015 08:52 PM, Hilko Bengen wrote: Can you tell me a reliable source for that copyright information? I found that information on the debian/copyright of the Debian texi2html which I expect should be a reliable source. Thanks for the quick reply! akira signature.asc Description: OpenPGP digital signature
Bug#794955: gperf: Embedded code copy with missing copyright
Source: gperf Version: 3.0.4-1 Severity: serious Justification: Policy 4.5 User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps Hi, Your packages contains an embedded code copy of texi2html which is copyright Lionel Cons and others and is licensed under the GPL and Creative Commons Attribution-ShareAlike license. This information is missing from debian/copyright of gperf and is thus a violation of policy §4.5. I found this bug while working on the reproducible builds project [1] to make texi2html produce reproducible output. From that point of view there are two options: 1. remove the embedded code copy [2] and build-depend on texi2html (this would also make policy §4.13 happy). I would prefer this solution and would supply you with a patch if you want. Your package would then automatically become reproducible. 2. keep the embedded code copy and amend your debian/copyright. In this case I would open another bug so that your embedded copy of texi2html is patched to produce reproducible output. Kind regards, akira [1] https://wiki.debian.org/ReproducibleBuilds/About [2] https://wiki.debian.org/EmbeddedCodeCopies -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#794955: gperf: Embedded code copy with missing copyright
Control: tag -1 moreinfo Your packages contains an embedded code copy of texi2html which is copyright Lionel Cons and others and is licensed under the GPL and Creative Commons Attribution-ShareAlike license. This information is missing from debian/copyright of gperf and is thus a violation of policy §4.5. Can you tell me a reliable source for that copyright information? Online, I have only found old (pre-GNU) versions such as 1.52 with a weird copyright notice, but no license -- and later versions distributed by the FSF under the GPL2. I found this bug while working on the reproducible builds project [1] to make texi2html produce reproducible output. Thank you, the effort is very much appreciated from my part. 1. remove the embedded code copy [2] and build-depend on texi2html (this would also make policy §4.13 happy). I would prefer this solution and would supply you with a patch if you want. Your package would then automatically become reproducible. 2. keep the embedded code copy and amend your debian/copyright. In this case I would open another bug so that your embedded copy of texi2html is patched to produce reproducible output. I'd like to amend debian/copyright, but also change the Makefile so that the Debian-provided texi2html is used instead. (I did verifiy that it still builds). Cheers, -Hilko -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
