Luciano,

On Wed, Apr 7, 2010 at 2:47 PM, Luciano Bello <luci...@debian.org> wrote:
> El Mar 06 Abr 2010, Andres Riancho escribió:
>> 2010/4/6 Michal Ambroz <re...@seznam.cz>:
>> > I have attached overview with copyrights used in w3af which I was able to
>> > find sofar.
>>
>>     Luciano will be able to confirm, but I think that he just created
>> the python-xdot and python-ntlm packages, and made w3af dependent on
>> those two. That way, w3af uses those libraries, and the package isn't
>> in conflict.
>
> In the script to build the orig file you will see which extlibs have been
> removed for the Debian package.
>
> http://w3af.svn.sourceforge.net/viewvc/w3af/extras/debian/mk_debian_directory.sh?view=markup
>
>>     Would that work for Fedora?
>>
>> > 2) Creative Commons Attribution-Share Alike 3.0 License
>> > Creative commons has not approved any other license to be as free as this
>> > license so I assume it is not possible to deliver it with GPLv2 software
>> > - sure I might be wrong: http://creativecommons.org/compatiblelicenses
>
> I'm not a license expert either. I'm not totally familiar with the concept
> of "license conflict/compatibility". Since
> 1- Creative Commons Attribution Share-Alike (CC-BY-SA) v3.0 and GPLv2 meet the
> The Debian Free Software Guidelines according with
> http://wiki.debian.org/DFSGLicenses.
> 2- The 9th point of the DFSG says: "License Must Not Contaminate Other
> Software".
>
> Then, there is no problem, AFAICS, to distribute (CC-BY-SA) v3.0 and GPLv2
> software in the same package. Which license correspond to which part of the
> code should be specified in our copyright file
> (http://w3af.svn.sourceforge.net/viewvc/w3af/extras/debian/trunk/debian/copyright?view=markup).
> The w3af license only applies to w3af code.
>
>> > Files under this license:
>> > ./plugins/discovery/dir_bruter/common_dirs_small.db
>>
>>     I think that Luciano removed this file completely from the debian
>> package.
>
> The file is part of the package
> http://packages.debian.org/search?searchon=contents&keywords=common_dirs_small.db&mode=path&suite=unstable&arch=any
> but I missed it in the copyright file. Thanks for the spot, now is fixed.
> http://w3af.svn.sourceforge.net/w3af/?rev=3467&view=rev
>
>> > extlib/nltk/corpus/reader/sinica_treebank.py
>>
>>     Don't remember about this one.
>
> nltk is a big problem. see http://bugs.debian.org/571004 and
> http://bugs.debian.org/279422 . I'm waiting for a resolution of #279422.
> Otherwise, w3af won't be part of the next Debian release.

    That should never happen. If we face that situation, we can just
remove the plugin that uses nltk.

>> ...
>> > ...
>> > <     Luciano worked a lot with the licenses in order to make everything
>> > < work in Debian. I'm sure he did an excellent work because he bugged me
>> > Sure he did great job. His notes in the debian package inspired me to do
>> > the same review for Fedora, when I was trying to create rpm package.
>
> licenses are complicated :/
>
> luciano
>



-- 
Andrés Riancho
Founder, Bonsai - Information Security
http://www.bonsai-sec.com/
http://w3af.sf.net/

------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
W3af-develop mailing list
W3af-develop@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/w3af-develop

Reply via email to