Re: Git branch layout for packages requiring DFSG-cleaning

Soren Stoutner <[email protected]>
Newsgroups gmane.linux.debian.devel.general
Organization Debian
Message-ID <[email protected]>
On Monday, August 24, 2026 8:39:19 AM Mountain Standard Time Russ Allbery 
wrote:
> Otto Kekäläinen <[email protected]> writes:
> > Somewhat of a tangent, but I think it is already pretty well established
> > that hosting a copy of upstream git on salsa.debian.org is acceptable,
> > regardless of what files upstream has in their git HEAD or history. Only
> > the stuff we upload to Debian archives is what we consider
> > "redistribution".
> 
> I agree that this is what people tend to do, but legally this feels like
> utter nonsense, so I'm worried that eventually we will be bitten by that.
> I cannot imagine any reasonable legal interpretation of the term under
> which Debian making the code available via Git from Salsa does not
> constitute redistribution.
> 
> If the problem is only DFSG issues, then the law presumably doesn't care
> if we're breaking our own rules. We can just say that the DFSG is ignored
> for things hosted on Salsa, I guess, and that stance does have a lot of
> practical benefits and probably not a lot of meaningful downsides.
> 
> But if the files really aren't legally redistributable by Debian at all,
> or if Salsa violates some terms of the license, making them available on
> Salsa is just as much redistribution as mirroring upstream's tarball
> distribution point would be.

I agree with Russ’s interpretation.

-- 
Soren Stoutner
[email protected]
signature.asc (application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEEJKVN2yNUZnlcqOI+wufLJ66wtgMFAmqMjqcACgkQwufLJ66w
tgMsoA/+ODrtlnEI1WL4XcgRDKkIoFZ7VfAYE4lsbAJyVVmRDdtnEl5xJceasVDO
1I1O31zIC531YxGXskI3Xdz5Ka8+kuGCKqCzpxaWQX3rA5KHw/yXrlH99NUK3buX
GjHonDZiDKkKFUNBSWjxsu94ZTot9UNnH0lAv9hHPgkDjcxqvadFCoemvpfvZjro
2bHDv6ybokbaOZqp2N5cOB7WXmDc64e9xwip4gMpYxHALTGDe6d1865/75yeCF9+
0NwoDTKYOxfnDo1OpSNR8lzWz+D6qONBr35fpe2HAjQQzvtwkogV8/l2ljyoD9tB
oom8T9UL6WZbqZ5qvzygAu/Wx9hu/Oneoz5so+I5i/wHiLnCgNIFktzgelAm79nr
qy51Nx/2mZm42xCMGgUQAcAVXwKjwLg3G0O9zyTXdvnDDUE3mivVS+AhFuFiB+cO
HZFi4d3vAf7uRgfe5pDP5oNGgZcGw6ZWO5Y1lur4VdwW1YNTlgiEmO8dGQVgahTf
4Aa5MftZCI+tQZA11yRAC0leclh562i8PhFl1XXRlItsAh0uQ82cs2x8D1OticND
dL6ocneAHKK6/UdauengbwO3SQ0FJLYX5RMmklvzzgalN7SScrciUVI3ten39K3r
KEm3f8TrV7OhpSdq3fIZSyeFjy6A7g05RH/QSpkOdaIKjNmu3aA=
=sQLa
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.