Re: is copyleft packaging bad for Debian?
Jeremy Stanley <[email protected]> Wed, 4 Feb 2026 17:48:14 +0000
| Newsgroups | gmane.linux.debian.devel.project |
|---|---|
| Message-ID | <[email protected]> |
On 2026-02-03 15:40:58 -0800 (-0800), Russ Allbery wrote: [...] > This is a really good point. I did not think about patent licenses, but > indeed those are a completely different problem with different tradeoffs. And to be clear, this isn't a niche challenge. There are, for example, patent clauses in Apache Software License v2 and GNU Public License v3, extremely popular choices on both sides of the permissive vs copyleft aisles. > For example, I suspect one of the most common failure modes, legally, of > the standard community assumption about free software licensing is when > someone submits a patch on employer time without getting explicit > permission from their employer to release the work as free software. > Depending on local laws, work contracts, etc., that patch may be owned by > their employer under work-for-hire laws and the person submitting it may > have no legal right to agree to anything regarding it. [...] Right, this is precisely why (from what I understand) Apache Software Foundation counsel had them impose a CLA on participants in their projects, and subsequent non-ASF projects reusing their license followed suit. Inbound=outbound is a fairly comfortable assumption when it comes to copyright, but patent grants are an entirely different kettle of fish. -- Jeremy Stanley
signature.asc
(application/pgp-signature, 963 B)
-----BEGIN PGP SIGNATURE----- iQKTBAABCgB9FiEEl65Jb8At7J/DU7LnSPmWEUNJWCkFAmmDhlZfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDk3 QUU0OTZGQzAyREVDOUZDMzUzQjJFNzQ4Rjk5NjExNDM0OTU4MjkACgkQSPmWEUNJ WCk54hAAkPcHueHH1ixYScyvOHVyAN7suWvM9m/kmXFKItKjVNXorEGA/s9Cm2CO tziXqfynBZ3GjjP+Y18q9Vqw2+/jlWW4T6dIgcB6I2oU7qg5ppzleymHW6M02tgg pequrSgd7qVKE4BHuSh1WVsnpFAHrzMomfjcdsL8vN4MDalbuy1LEe+iP+wj7LLa KLFQJZv2KtpRaXPEKIFRwy7UD2GhoQT5Ojp6wNHEabOhGS4XWaqUmV16+ddK/EV9 4ebJ7DN7YaelOsRuo7OaI4vDfvuemjfCNyOVJHeR0LJmtkNpCxEdNf4gToMXiA1s h9oKKIIm9BOoAPTMTVsIp/65VNrIXOe+L/FNTEktjkn3Q4rnLtpW0rL0hpXSQAJG hAC/bl6jsymCGflJRYfO4jsbcEW1Jz+IH5qtv+rN4SHHnCUgFYSobJImXpEehjib sW7H6rpdsN5FfrLGc7Rc931wtp2XHZ5+QMg9a5LoWhqRF0MvBKRYy161Yw0Id3G7 ZvIVFqm8noHbUUqF76vZ/HKuGUmNs8bS6mLxPpkJqwtd6Y8a0ad1livjYUkmppPh oSszzI6KxeKSm/tON7sI9Btqti3riP/p4R64CNYEPffuMY6lVcvuD1gBSW8PKy9L KgkSLGJVS/RvdmaBFdHHNdYE0sTsbGhhOACTP8wprRf1NTHexd8= =wsLG -----END PGP SIGNATURE-----