From 1156e439928a192ff2e67852cf6d20d166449411 Mon Sep 17 00:00:00 2001 From: Daira Hopwood Date: Mon, 6 Feb 2023 15:17:51 +0000 Subject: [PATCH] Clarify that patches to a dependency are under the same license as that dependency. The relevant licenses are: * bdb: BDB (variant of Gnu Affero GPL) * libevent: BSD-3-clause * libsodium: ISC * tl_expected: CC0-1.0 * zeromq: LGPL-3+ with ZeroMQ exception In the case of zeromq, this is an explicit condition of the license -- specifically its static linking exception, which we rely on: "If you modify this library, you must extend this exception to your version of the library." In all cases, patches are necessarily derived (even if only trivially) from the code they are patching. We technically could relicense to MIT in some cases, but using the original license for patches we've written is a courtesy that makes it easier for upstream to adopt the patch, even if we don't specifically file a PR. native_cctools is also patched, but Debian copyright policy does not require `contrib/debian/copyright` to mention this dependency, because it is only part of the build process and its contents do not get compiled into the resulting build: https://www.debian.org/doc/debian-policy/ch-archive.html#s-pkgcopyright In all cases I checked that we have the right to distribute the patch under the relevant license (i.e. it doesn't depend on any incompatible third-party contributions). Reviewers should satisfy themselves of this. Signed-off-by: Daira Hopwood --- contrib/debian/copyright | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/contrib/debian/copyright b/contrib/debian/copyright index 5d7ccc974..14aba38f8 100644 --- a/contrib/debian/copyright +++ b/contrib/debian/copyright @@ -108,6 +108,7 @@ Copyright: 2014-2015, Brian Davis License: BSD-3-clause-Tobias-Klein Files: depends/sources/libsodium-*.tar.gz + depends/patches/libsodium/* Copyright: 2013-2022 Frank Denis License: ISC @@ -122,6 +123,7 @@ Comment: This entry is specifically for the libc++ library. The libc++ Authors are listed in https://github.com/llvm/llvm-project/blob/main/libcxx/CREDITS.TXT . Files: depends/sources/db-*.tar.gz + depends/patches/bdb/* Copyright: 1990, 2016 Oracle and/or its affiliates; 1990, 1993, 1994, 1995 The Regents of the University of California; 1995, 1996 The President and Fellows of Harvard University; @@ -129,6 +131,7 @@ Copyright: 1990, 2016 Oracle and/or its affiliates; License: BDB Files: depends/sources/libevent-*.tar.gz + depends/patches/libevent/* Copyright: 2000-2007 Niels Provos 2007-2012 Niels Provos and Nick Mathewson 2000 Dug Song @@ -141,6 +144,7 @@ Copyright: 2000-2007 Niels Provos License: BSD-3-clause Files: depends/sources/zeromq-*.tar.gz + depends/patches/zeromq/* Copyright: 1994, 1995, 1996, 1999, 2000, 2001, 2002, 2004, 2005, 2006, 2007 Free Software Foundation, Inc. 2007-2014 iMatix Corporation 2009-2011 250bpm s.r.o. @@ -161,6 +165,7 @@ Copyright: 2006 Nemanja Trifunovic License: Boost-Software-License-1.0 Files: depends/sources/tl-expected-*.tar.gz + depends/patches/tl_expected/* Copyright: 2017-2021 Sy Brand (@TartanLlama), 2022 The Zcash developers License: CC0-1.0 Comment: Other contributors are Simon Truscott (@bobbleclank), Kévin Alexandre Boissonneault (@KABoissonneault),