Re: Missing copyright clause of debian directory

Nicholas D Steeves <[email protected]>
Newsgroups gmane.linux.debian.devel.legal
Message-ID <[email protected]>
Hello,

Soren Stoutner <[email protected]> writes:

> On Wednesday, June 26, 2024 3:13:38 PM MST Nicholas D Steeves wrote:
>> Soren Stoutner <[email protected]> writes:
>
> When debian/copyright contains a “Files: *” without a separate “Files: debian/*” section, it is 
> making an explicit statement that the entire debian directory is licenses with the 
> information listed in “Files: *”.  It is possible, even likely, that this was a typo, and doesn’t 
> represent the intention of the author of the debian/* files, but it is what he wrote down.

If "it is possible, even likely, that it is a typo", intention cannot be
inferred, and due diligence and goodwill need to be demonstrated before
proceeding; this is why we contact the people involved in such cases.

> Unless there is some other written indication that the author of the original debian/* files 
> intended a different license, **we have to assume he meant what he wrote** when he 
> drafted debian/copyright.

This is a conclusion of convenience, not one of necessity.  Legal
battles cost money--even stupid and self-evident ones like trademarks
where there was already prior art.  Our upstream copyright statements
are one of convenience, but our debian/* statements are actual.

> Soren
>
> PS. To fully flush out this discussion, this is what was written in debian/copyright:
>
> Files:     *
> Copyright: 2011-2019 François-Xavier Bois
> License:   GPL-2+
>
> François-Xavier Bois is the upstream developer.  Thomas Koch <[email protected]> is the 
> package maintainer who wrote debian/copyright.  If he had intended to license his 
> contributions under the GPL-2+, I would have expected that he would have added his name 
> to the copyright field (or, even better, created a separate debian/* section).  But, copyright 
> law allows an author to transfer their copyright to another party.

I agree, but this is not without pitfalls and ambiguities, particularly
when looking at international cases.

> So, imagine that Thomas 
> Koch wanted to transfer his copyright for debian/* to François-Xavier Bois.  If that was what 
> he wanted to do, then he could indicate that by putting the following in debian/copyright:
>
> Files:     *
> Copyright: 2011-2019 François-Xavier Bois
> License:   GPL-2+

Comment: This is what the DEP5 comment field is for, and where the
 intention to assign copyright may be unambiguously declared.
 Alternatively, the author could say here that the work does not meet
 the threshold for originality necessary for copyright to occur.
 Alternatively, a debian/* "License: CC0" could have been declared as an
 "I don't care what you do with this" statement.

> And because that is exactly what he did put in debian/copyright, we have to assume he 
> meant what he wrote unless we have some other communication from him indicating 
> otherwise.

because -> therefore is neither valid nor true.

All this aside, I think we can agree that it is wrong to write copyright
statements on behalf of other people without their knowledge or consent;
this was primarily why I sent my mentee here.  I'm also surprised that
no one mentioned that the longer the list of copyright holders, the
harder it is to ever change to a potentially better license (eg: The
Linux kernel is likely to remain GPL-2-only forever, unless rewritten).

Regards,
Nicholas
signature.asc (application/pgp-signature, 857 B)
-----BEGIN PGP SIGNATURE-----
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=3cNb
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.