Luciano, On Wed, Apr 7, 2010 at 2:47 PM, Luciano Bello <luci...@debian.org> wrote: > El Mar 06 Abr 2010, Andres Riancho escribió: >> 2010/4/6 Michal Ambroz <re...@seznam.cz>: >> > I have attached overview with copyrights used in w3af which I was able to >> > find sofar. >> >> Luciano will be able to confirm, but I think that he just created >> the python-xdot and python-ntlm packages, and made w3af dependent on >> those two. That way, w3af uses those libraries, and the package isn't >> in conflict. > > In the script to build the orig file you will see which extlibs have been > removed for the Debian package. > > http://w3af.svn.sourceforge.net/viewvc/w3af/extras/debian/mk_debian_directory.sh?view=markup > >> Would that work for Fedora? >> >> > 2) Creative Commons Attribution-Share Alike 3.0 License >> > Creative commons has not approved any other license to be as free as this >> > license so I assume it is not possible to deliver it with GPLv2 software >> > - sure I might be wrong: http://creativecommons.org/compatiblelicenses > > I'm not a license expert either. I'm not totally familiar with the concept > of "license conflict/compatibility". Since > 1- Creative Commons Attribution Share-Alike (CC-BY-SA) v3.0 and GPLv2 meet the > The Debian Free Software Guidelines according with > http://wiki.debian.org/DFSGLicenses. > 2- The 9th point of the DFSG says: "License Must Not Contaminate Other > Software". > > Then, there is no problem, AFAICS, to distribute (CC-BY-SA) v3.0 and GPLv2 > software in the same package. Which license correspond to which part of the > code should be specified in our copyright file > (http://w3af.svn.sourceforge.net/viewvc/w3af/extras/debian/trunk/debian/copyright?view=markup). > The w3af license only applies to w3af code. > >> > Files under this license: >> > ./plugins/discovery/dir_bruter/common_dirs_small.db >> >> I think that Luciano removed this file completely from the debian >> package. > > The file is part of the package > http://packages.debian.org/search?searchon=contents&keywords=common_dirs_small.db&mode=path&suite=unstable&arch=any > but I missed it in the copyright file. Thanks for the spot, now is fixed. > http://w3af.svn.sourceforge.net/w3af/?rev=3467&view=rev > >> > extlib/nltk/corpus/reader/sinica_treebank.py >> >> Don't remember about this one. > > nltk is a big problem. see http://bugs.debian.org/571004 and > http://bugs.debian.org/279422 . I'm waiting for a resolution of #279422. > Otherwise, w3af won't be part of the next Debian release.
That should never happen. If we face that situation, we can just remove the plugin that uses nltk. >> ... >> > ... >> > < Luciano worked a lot with the licenses in order to make everything >> > < work in Debian. I'm sure he did an excellent work because he bugged me >> > Sure he did great job. His notes in the debian package inspired me to do >> > the same review for Fedora, when I was trying to create rpm package. > > licenses are complicated :/ > > luciano > -- Andrés Riancho Founder, Bonsai - Information Security http://www.bonsai-sec.com/ http://w3af.sf.net/ ------------------------------------------------------------------------------ Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev _______________________________________________ W3af-develop mailing list W3af-develop@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/w3af-develop