On Tue, 2018-04-10 at 11:42 +0200, Ansgar Burchardt wrote:
> Hi,
>
> [ BCC'ed maintainers of packages mentioned below ]
>
> Chris Lamb pointed out that nmap uses a special version of the GPL-2
> which is incompatible with the standard GPL license:
>
> +---
> > Because this license imposes special exceptions to the GPL, Covered
> > work may not be combined (even as part of a larger work) with plain
> > GPL software."
>
> +---
>
> The license in particular also forbids front-ends parsing nmap's output
> that are released under a license not compatible with nmap's:
>
> +---
> > For example, we consider an application to constitute a
> > derivative work for the purpose of this license if it does any of the
> > following with any software or content covered by this license
> > ("Covered Software"):
> > [...]
> > - Is designed specifically to execute Covered Software and parse the
> > results (as opposed to typical shell or execution-menu apps, which
> > will execute anything you tell them to).
> +---
This is an interesting legal theory, and I would be interested to hear
whether any free software lawyer agrees with it. (And the distinction
they try to draw is so unclear that I really doubt a court would want
to rule on it.)
> This means packages such as `nmapsi4`, `python-nmap`, `lsat`, `nikto`,
> `zabbix`, `oscinventory-agent`, `fusioninventory-agent-task-network` and
> possibly others which are licensed under the GPL-2 (some with or-later)
> do not conform to nmap's license requirements...
>
> I plan to file RC bugs against these packages soon; this thread can
> serve as a central place for discussions.
I think we should determine that either:
1. This provision is not enforceable, and we don't need to do that.
2. This provision is enforceable, it is a restriction on use, and it
makes nmap non-free.
Ben.
--
Ben Hutchings
All the simple programs have been written, and all the good names taken
Attachment:
signature.asc
Description: This is a digitally signed message part