Hello László, On Mon 02 Mar 2020 at 10:41PM +01, László Böszörményi (GCS) wrote:
> On Mon, Mar 2, 2020 at 7:54 PM Sean Whitton <spwhit...@spwhitton.name> wrote: >> On Mon 02 Mar 2020 at 06:39PM +01, László Böszörményi (GCS) wrote: >> > On Mon, Mar 2, 2020 at 10:27 AM Alvin Chen <sonoma...@gmail.com> wrote: >> >> https://sources.debian.org/src/botan/2.12.1-2/src/lib/prov/pkcs11/pkcs11.h/ >> > It's up to Jack, who develops Botan. I'm still not sure this text >> > snippet makes the code non-modifiable. But let me ask our FTP Masters >> > and Jack himself how to interpret it. >> >> Can you give a link to the file in question please? > It's on the link yourself also included in your reply. Currently on > the top of the text. But if you mean link to the upstream file which > is in the latest release[1] and/or the license text[2] (link is in the > file) of OASIS Open then here you go (under the 'Notices' paragraph). > The actual text snippet in question is (if I read Alvin correctly): > "However, this document itself may not be modified in any way, > including by removing the copyright notice or references to OASIS, > [...]". But please read the whole copyright text in all. Does the 'may > not be modified in any way' refers the code (header file this time) or > only the copyright text itself? > In short, OASIS Open is a DFSG compliant license or not? Thanks. It looks like the license which does not permit modification applies to the specification, so the specification is not DFSG-free. As for pkcs11.h, I can't see any statement that it is under any license at all, never mind a DFSG-free license. So the bug severity would seem to be correct. -- Sean Whitton
signature.asc
Description: PGP signature