Re: is copyleft packaging bad for Debian?

Jeremy Stanley <[email protected]> Wed, 4 Feb 2026 17:48:14 +0000
Newsgroups gmane.linux.debian.devel.project
Message-ID <[email protected]>
On 2026-02-03 15:40:58 -0800 (-0800), Russ Allbery wrote:
[...]
> This is a really good point. I did not think about patent licenses, but 
> indeed those are a completely different problem with different tradeoffs.

And to be clear, this isn't a niche challenge. There are, for 
example, patent clauses in Apache Software License v2 and GNU Public 
License v3, extremely popular choices on both sides of the 
permissive vs copyleft aisles.

> For example, I suspect one of the most common failure modes, legally, of 
> the standard community assumption about free software licensing is when 
> someone submits a patch on employer time without getting explicit 
> permission from their employer to release the work as free software. 
> Depending on local laws, work contracts, etc., that patch may be owned by 
> their employer under work-for-hire laws and the person submitting it may 
> have no legal right to agree to anything regarding it.
[...]

Right, this is precisely why (from what I understand) Apache 
Software Foundation counsel had them impose a CLA on participants in 
their projects, and subsequent non-ASF projects reusing their 
license followed suit. Inbound=outbound is a fairly comfortable 
assumption when it comes to copyright, but patent grants are an 
entirely different kettle of fish.
-- 
Jeremy Stanley
signature.asc (application/pgp-signature, 963 B)
-----BEGIN PGP SIGNATURE-----
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=wsLG
-----END PGP SIGNATURE-----