Debian Bug report logs - #393411
Source package contains non-free IETF RFC/I-D's

version graph

Package: quagga; Maintainer for quagga is Christian Hammers <ch@debian.org>; Source for quagga is src:quagga.

Reported by: Simon Josefsson <jas@extundo.com>

Date: Mon, 16 Oct 2006 10:22:23 UTC

Severity: serious

Tags: etch-ignore

Found in version quagga/0.99.5-2

Done: Christian Hammers <ch@debian.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, Christian Hammers <ch@debian.org>:
Bug#393411; Package quagga. Full text and rfc822 format available.

Acknowledgement sent to Simon Josefsson <jas@extundo.com>:
New Bug report received and forwarded. Copy sent to Christian Hammers <ch@debian.org>. Full text and rfc822 format available.

Message #5 received at submit@bugs.debian.org (full text, mbox):

From: Simon Josefsson <jas@extundo.com>
To: submit@bugs.debian.org
Subject: Source package contains non-free IETF RFC/I-D's
Date: Mon, 16 Oct 2006 12:12:15 +0200
Package: quagga
Version: 0.99.5-2
Severity: serious

Hi!

This bug has been filed on multiple packages, and general discussions
are kindly requested to take place on debian-legal or debian-devel in
the thread with Subject: "Non-free IETF RFC/I-Ds in source packages".

It seems this source package contains the following files from the
IETF under non-free license terms:

quagga-0.99.5/doc/draft-zebra-00.txt 

The license on RFC/I-Ds is not DFSG-free, see:
 * http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=199810
 * http://release.debian.org/removing-non-free-documentation
 * http://wiki.debian.org/NonFreeIETFDocuments

The etch release policy says binary and source packages must each be free:
 * http://release.debian.org/etch_rc_policy.txt

The severity is serious, because this violates the Debian policy:
 * http://www.debian.org/doc/debian-policy/ch-archive.html#s-dfsg

There are (at least) three ways to fix this problem.  In order of
preference:

1. Ask the author of the RFC to re-license the RFC under a free
   license.  A template for this e-mail request can be found at
   http://wiki.debian.org/NonFreeIETFDocuments

2. Remove the non-free material from the source, e.g., by re-packaging
   the upstream archive and adding a 'dfsg' version name to it.

3. Move the package to non-free.

I went over many packages looking for names of likely non-free files,
and there may be false positives.  If this is the case for your
package, I'm sorry for the noise.  I'll modify the scripts to take
into account false positives when I learn of them, and publish the
list of exceptions under "Known exceptions" at
<http://wiki.debian.org/NonFreeIETFDocuments>.

Thanks,
Simon



Information forwarded to debian-bugs-dist@lists.debian.org, Christian Hammers <ch@debian.org>:
Bug#393411; Package quagga. Full text and rfc822 format available.

Acknowledgement sent to Steve Langasek <vorlon@debian.org>:
Extra info received and forwarded to list. Copy sent to Christian Hammers <ch@debian.org>. Full text and rfc822 format available.

Message #10 received at 393411@bugs.debian.org (full text, mbox):

From: Steve Langasek <vorlon@debian.org>
To: Simon Josefsson <jas@extundo.com>, 393356@bugs.debian.org, 393357@bugs.debian.org, 393358@bugs.debian.org, 393359@bugs.debian.org, 393360@bugs.debian.org, 393361@bugs.debian.org, 393364@bugs.debian.org, 393365@bugs.debian.org, 393366@bugs.debian.org, 393367@bugs.debian.org, 393368@bugs.debian.org, 393369@bugs.debian.org, 393370@bugs.debian.org, 393371@bugs.debian.org, 393372@bugs.debian.org, 393373@bugs.debian.org, 393374@bugs.debian.org, 393375@bugs.debian.org, 393376@bugs.debian.org, 393377@bugs.debian.org, 393378@bugs.debian.org, 393379@bugs.debian.org, 393380@bugs.debian.org, 393381@bugs.debian.org, 393382@bugs.debian.org, 393383@bugs.debian.org, 393384@bugs.debian.org, 393385@bugs.debian.org, 393386@bugs.debian.org, 393387@bugs.debian.org, 393388@bugs.debian.org, 393389@bugs.debian.org, 393390@bugs.debian.org, 393391@bugs.debian.org, 393392@bugs.debian.org, 393393@bugs.debian.org, 393394@bugs.debian.org, 393395@bugs.debian.org, 393396@bugs.debian.org, 393397@bugs.debian.org, 393398@bugs.debian.org, 393399@bugs.debian.org, 393400@bugs.debian.org, 393402@bugs.debian.org, 393403@bugs.debian.org, 393405@bugs.debian.org, 393406@bugs.debian.org, 393408@bugs.debian.org, 393409@bugs.debian.org, 393410@bugs.debian.org, 393411@bugs.debian.org, 393412@bugs.debian.org, 393413@bugs.debian.org, 393414@bugs.debian.org, 393415@bugs.debian.org, 393416@bugs.debian.org, 393417@bugs.debian.org, 393418@bugs.debian.org, 393419@bugs.debian.org, 393420@bugs.debian.org, 393421@bugs.debian.org, 393422@bugs.debian.org, 393423@bugs.debian.org, 393424@bugs.debian.org, 393425@bugs.debian.org
Subject: Re: Bug#393356: Source package contains non-free IETF RFC/I-D's
Date: Mon, 16 Oct 2006 22:02:24 -0700
tags 393356 etch-ignore
tags 393357 etch-ignore
tags 393358 etch-ignore 
tags 393359 etch-ignore
tags 393360 etch-ignore 
tags 393361 etch-ignore 
tags 393364 etch-ignore 
tags 393365 etch-ignore 
tags 393366 etch-ignore 
tags 393367 etch-ignore 
tags 393368 etch-ignore 
tags 393369 etch-ignore 
tags 393370 etch-ignore 
tags 393371 etch-ignore 
tags 393372 etch-ignore 
tags 393373 etch-ignore 
tags 393374 etch-ignore 
tags 393375 etch-ignore 
tags 393376 etch-ignore 
tags 393377 etch-ignore 
tags 393378 etch-ignore 
tags 393379 etch-ignore 
tags 393380 etch-ignore 
tags 393381 etch-ignore 
tags 393382 etch-ignore 
tags 393383 etch-ignore 
tags 393384 etch-ignore 
tags 393385 etch-ignore 
tags 393386 etch-ignore 
tags 393387 etch-ignore 
tags 393388 etch-ignore 
tags 393389 etch-ignore 
tags 393390 etch-ignore 
tags 393391 etch-ignore 
tags 393392 etch-ignore 
tags 393393 etch-ignore 
tags 393394 etch-ignore 
tags 393395 etch-ignore 
tags 393396 etch-ignore 
tags 393397 etch-ignore 
tags 393398 etch-ignore 
tags 393399 etch-ignore 
tags 393400 etch-ignore 
tags 393402 etch-ignore 
tags 393403 etch-ignore 
tags 393405 etch-ignore 
tags 393406 etch-ignore 
tags 393408 etch-ignore 
tags 393409 etch-ignore 
tags 393410 etch-ignore 
tags 393411 etch-ignore 
tags 393412 etch-ignore 
tags 393413 etch-ignore 
tags 393414 etch-ignore 
tags 393415 etch-ignore 
tags 393416 etch-ignore 
tags 393417 etch-ignore 
tags 393418 etch-ignore 
tags 393419 etch-ignore 
tags 393420 etch-ignore 
tags 393421 etch-ignore 
tags 393422 etch-ignore 
tags 393423 etch-ignore 
tags 393424 etch-ignore 
tags 393425 etch-ignore
thanks

Hi Simon,

On Mon, Oct 16, 2006 at 11:51:17AM +0200, Simon Josefsson wrote:
> This bug has been filed on multiple packages, and general discussions
> are kindly requested to take place on debian-legal or debian-devel in
> the thread with Subject: "Non-free IETF RFC/I-Ds in source packages".

> It seems this source package contains the following files from the
> IETF under non-free license terms:

> apg-2.2.3/doc/rfc0972.txt 
> apg-2.2.3/doc/rfc1750.txt 

> The license on RFC/I-Ds is not DFSG-free, see:
>  * http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=199810
>  * http://release.debian.org/removing-non-free-documentation
>  * http://wiki.debian.org/NonFreeIETFDocuments

> The etch release policy says binary and source packages must each be free:
>  * http://release.debian.org/etch_rc_policy.txt

> The severity is serious, because this violates the Debian policy:
>  * http://www.debian.org/doc/debian-policy/ch-archive.html#s-dfsg

> There are (at least) three ways to fix this problem.  In order of
> preference:

> 1. Ask the author of the RFC to re-license the RFC under a free
>    license.  A template for this e-mail request can be found at
>    http://wiki.debian.org/NonFreeIETFDocuments

> 2. Remove the non-free material from the source, e.g., by re-packaging
>    the upstream archive and adding a 'dfsg' version name to it.

> 3. Move the package to non-free.

> I went over many packages looking for names of likely non-free files,
> and there may be false positives.  If this is the case for your
> package, I'm sorry for the noise.  I'll modify the scripts to take
> into account false positives when I learn of them, and publish the
> list of exceptions under "Known exceptions" at
> <http://wiki.debian.org/NonFreeIETFDocuments>.

Andi Barth and I have discussed these bugs, and we believe these bugs should
be granted an exception for etch, for the following reasons:

- As you mention, this mass-filing is based on file names and may include
  false positives for this reason.  Given this uncertainty, which covers
  both files that may not actually contain RFCs and RFCs that may be
  distributed with separate permissions from the authors, I do not consider
  it reasonable for the burden to be on the maintainers (and the release
  team) to demonstrate any particular bug to be a false-positive before the
  package can be included in the release.
- The time between the bug filing and the scheduled release of etch is now
  relatively short, and I don't believe, given the comparatively small
  impact of these bugs (where RC bugs are concerned), that they should
  warrant either delaying the release of etch or requiring the removal of a
  package so affected.  It is normal to allow some latitude for such license
  issues while they are being investigated/addressed.

I'm happy to see that a number of maintainers have already made uploads (or
are preparing uploads) to address these bugs, and I would encourage all
maintainers to try to address such bugs in their packages for release.  I am
also certainly happy to grant freeze exceptions for uploads fixing these
bugs.  We only will not treat these as bugs that must be fixed prior to
release.

Thanks,
-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
vorlon@debian.org                                   http://www.debian.org/



Tags added: etch-ignore Request was from Steve Langasek <vorlon@debian.org> to control@bugs.debian.org. Full text and rfc822 format available.

Information forwarded to debian-bugs-dist@lists.debian.org, Christian Hammers <ch@debian.org>:
Bug#393411; Package quagga. Full text and rfc822 format available.

Acknowledgement sent to Simon Josefsson <jas@extundo.com>:
Extra info received and forwarded to list. Copy sent to Christian Hammers <ch@debian.org>. Full text and rfc822 format available.

Message #17 received at 393411@bugs.debian.org (full text, mbox):

From: Simon Josefsson <jas@extundo.com>
To: 393411@bugs.debian.org, control@bugs.debian.org
Subject: Re: Bug#393411: Acknowledgement (Source package contains non-free IETF RFC/I-D's)
Date: Tue, 17 Oct 2006 17:30:38 +0200
severity wishlist
thanks

Hi!  I looked more carefully at this bug, and while draft-zebra-00.txt
looks like an IETF draft, it probably isn't.  Especially since the
author of that document is the author of the quagga package itself.

I'm changing the severity to wishlist, and request that the license of
the file is clarified somehow.

/Simon



Reply sent to Christian Hammers <ch@debian.org>:
You have taken responsibility. Full text and rfc822 format available.

Notification sent to Simon Josefsson <jas@extundo.com>:
Bug acknowledged by developer. Full text and rfc822 format available.

Message #22 received at 393411-done@bugs.debian.org (full text, mbox):

From: Christian Hammers <ch@debian.org>
To: Simon Josefsson <jas@extundo.com>, 393411-done@bugs.debian.org
Subject: Re: Bug#393411: Acknowledgement (Source package contains non-free IETF RFC/I-D's)
Date: Wed, 25 Oct 2006 19:27:58 +0200

On 2006-10-17 Simon Josefsson wrote:
> severity wishlist
> thanks
> 
> Hi!  I looked more carefully at this bug, and while draft-zebra-00.txt
> looks like an IETF draft, it probably isn't.  Especially since the
> author of that document is the author of the quagga package itself.

The source of the draft is also in the zebra/quagga package and the zebra
draft is not found on the www.rfc-editor.org site so this seems to be a clear
case of a draft that is currently only part of the Quagga/Zebra packages and
thus licenced like any other file there.

bye,

-christian-



Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Sun, 17 Jun 2007 14:15:48 GMT) Full text and rfc822 format available.

Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Fri Apr 25 01:36:21 2014; Machine Name: buxtehude.debian.org

Debian Bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.