Bug#1030304: Licensing & copyright issues

2023-02-03 Thread Petter Reinholdtsen
Control: severity -1 normal

[Adam Ant]
> Source files for libnml lack standard Debian or SPDX copyright headers.
> Also obsolete version of LGPL used.

Can you be more specific?  I do not understand what you mean by
"standard Debian or SPDX copyright headers", and fail to understand
how using old LGPL versions would be a problem.  Perhaps you can
prepare a patch with what you believe are more accurate copyright
information?  It would make it easier to understand exactly what
you are talking about. 

> Source files for both the core linuxcnc & libmnl are forked and munged from
> a NIST project known as the Enhanced Machine Control (EMC). The source code
> for this is public domain. One can NOT take PD code, claim copyright, and
> then slap an arbitrary license on it.
> 
> At best, renders the license unenforceable in many jurisdictions, or illegal
> in some.

I am unaware of any jurisdictions where publishing work derived from
public domain works would make it illegal to distribute.  Which
jurisdictions do you have in mind here?

Note, I agree that relicensing public domain works might be hard to
enforce copyright on the public domain code if the same code is
published both "alone" as public domain and as part of some non-public
domain code, as it would be hard to prove which version was the base of
such use, but that do not seem to be a relevant issue for distributing
LinuxCNC.

> Kindly refer to Debian Legal

Are you refering to specific existing posts on Debian Legal, or
suggesting we bring up some topic on the list ourself?  If the former,
can you point to specific posts on lists.debian.org?

-- 
Happy hacking
Petter Reinholdtsen



Bug#1030304: Licensing & copyright issues

2023-02-02 Thread Adam Ant
Source: linuxcnc
Severity: serious

Source files for libnml lack standard Debian or SPDX copyright headers. Also 
obsolete version of LGPL used.

Source files for both the core linuxcnc & libmnl are forked and munged from a 
NIST project known as the Enhanced Machine Control (EMC). The source code for 
this is public domain. One can NOT take PD code, claim copyright, and then slap 
an arbitrary license on it.

At best, renders the license unenforceable in many jurisdictions, or illegal in 
some.

Kindly refer to Debian Legal