Re: GPL-3+ licensed test fixture (SVG/metadata) in BSD-3 project
Mechtilde Stehmann <[email protected]> Mon, 16 Mar 2026 20:47:16 +0100
| Newsgroups | gmane.linux.debian.devel.legal |
|---|---|
| Message-ID | <[email protected]> |
Hello, Am 16.03.26 um 20:15 schrieb Soren Stoutner: > On Sunday, March 15, 2026 3:06:12 AM Mountain Standard Time Carl Keinath wrote: >> Hello, >> >> I have a licensing question regarding a Debian package. The upstream >> project is licensed under BSD-3-Clause. To run autopkgtests, I added a >> minimal cursor theme under debian/tests/. It consists of an SVG image >> and a metadata file (.hl) used as input data by the tests. >> >> These files are licensed under GPL-3+. During the tests they are >> converted into a compiled theme format (.hlc), which the test binaries >> then read. The files are not part of the upstream source code, are not >> linked into the program, and are not installed in any binary packages. >> >> Could including these GPL-3+ test data files under debian/tests/ >> cause the resulting test binaries, or the source package as a whole, >> to be considered a derivative work of GPL-3+? >> >> PS: please CC me, as I am not subscribed. > > No, I don’t think adding GPL-3+ test data to debian/tests makes the shipped binary > packages GPL-3+ (if someone is aware of a way that it would make the shipped binary > packages GPL-3+, please correct me). It does force everything that runs the Debian tests > to comply with the GPL-3+, but that is not a problem for Debian, as our testing > infrastructure handles many GPL-3+ files. > > I think you are fine as long as the licensing of these files is correctly identified in debian/ > copyright. The main question is: What are the requirements to have a derived work in the sense of the GPL? What can I put together without having a derived work? > -- Mechtilde Stehmann ## PGP encryption welcome ## F0E3 7F3D C87A 4998 2899 39E7 F287 7BBA 141A AD7F
OpenPGP_signature.asc
(application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE8ON/Pch6SZgomTnn8od7uhQarX8FAmm4XkUACgkQ8od7uhQa rX+NIw//aDzwVYImgzrT7htFTNP5sfmYHRbTe/SVbcy6hzJW3SgKyVOENGf86nuK 3RGsWQjlJc2TEu24IMETo4rl5V8cN/MGuHkf8yjp7jJmpSHnKS0Uxx3pWHYlC9Zd O8XuNY/iAc55CdJrWMd93cu6Y8V0c39pVtNy+vBGdGam3BZ7nDnHQdmFtN+CvWwA vcgLeglPh6TIwtSYxjb3lx7y78bN3/dxIVTQ3qNa7Tl7sgjWgMB1qJJ63hsA+hLu xnDk+7hzmwpbH50ah9DUiO6E/pplDTfKXJjd7/eI8/wnyy4Xl6P4q1aZzNbHMjV0 qBOlgIcQ9Z2Yupsphh9QN8la9Or/6zfpiVT1PsKWuW3UcCTM4OOzV1EKJCQRicuh YVSA4Y1W2OrAl7w+uqJnA9p7YSp4Az5UafK68ADL3mTK7DkMHXHITPnDpa1gWVBt 3OhTKUnUv9TE3EzZk1BDbI7ra7hI0hmjQwmsAdgBA60zF7inAOpHntfqlr8M3S8C S6ggurhtgIPD0XZfVfRDdTr/Tpdm1xiP86VxYUdcR2ExF+ko1s9KxmIfYMpo/YFA Z4rKrns42g4VbFNu1pl5eygn+XJw8NcWtxrceTpMD/o2s3WxA+eu6XfGKT6sqLgN TteKJMmYaiNOtL9WiR/B/VcDw6oYb11YDVHzOgcbtizwEeMUYUE= =2Obq -----END PGP SIGNATURE-----