Bug#799914: lintian: privacy-breach-generic false positive <link rel="alternate" type="application/rdf+xml" href="http://www.gnu.org/licenses/gpl-3.0.rdf" />
Package: lintian
Version: 2.5.37
Severity: minor
The GPL as published on
https://www.gnu.org/licenses/gpl-3.0-standalone.html contains the
following two lines:
<link rel="alternate" type="application/rdf+xml"
href="http://www.gnu.org/licenses/gpl-3.0.rdf"; />
Projects seem to include this file verbatim to display the GPL inside
the program. I've found that tag in a package to review:
X: qutebrowser: privacy-breach-generic usr/lib/python3/dist-packages/qutebrowser/html/COPYING.html (http://www.gnu.org/
The browser shows this file inline when it's requested to show its
license, so it's not a redundant copy of the GPL.
rel="alternate" links only offer an alternative representation and I
see no reason why a browser should fetch them automatically, so I
consider them generally -- and especially the example above -- a false
positive.
-- System Information:
Debian Release: stretch/sid
APT prefers unstable
APT policy: (990, 'unstable'), (600, 'testing'), (111, 'buildd-unstable'), (111, 'buildd-experimental'), (110, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 4.2.0-trunk-amd64 (SMP w/4 CPU cores)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages lintian depends on:
ii binutils 2.25.1-3
ii bzip2 1.0.6-8
ii diffstat 1.60-1
ii file 1:5.25-2
ii gettext 0.19.6-1
ii hardening-includes 2.7
ii intltool-debian 0.35.0+20060710.4
ii libapt-pkg-perl 0.1.29+b3
ii libarchive-zip-perl 1.51-1
ii libclass-accessor-perl 0.34-1
ii libclone-perl 0.38-1
ii libdigest-sha-perl 5.95-2
ii libdpkg-perl 1.18.3
ii libemail-valid-perl 1.196-1
ii libfile-basedir-perl 0.07-1
ii libipc-run-perl 0.94-1
ii liblist-moreutils-perl 0.413-1
ii libparse-debianchangelog-perl 1.2.0-8
ii libtext-levenshtein-perl 0.13-1
ii libtimedate-perl 2.3000-2
ii liburi-perl 1.69-1
ii man-db 2.7.3-1
ii patchutils 0.3.4-1
ii perl [libdigest-sha-perl] 5.20.2-6
ii t1utils 1.38-4
ii xz-utils 5.1.1alpha+20120614-2.1
Versions of packages lintian recommends:
ii dpkg 1.18.3
ii libautodie-perl 2.29-1
ii libperlio-gzip-perl 0.18-3+b1
ii perl 5.20.2-6
ii perl-modules [libautodie-perl] 5.20.2-6
Versions of packages lintian suggests:
ii binutils-multiarch 2.25.1-3
ii dpkg-dev 1.18.3
ii libhtml-parser-perl 3.71-2
ii libtext-template-perl 1.46-1
ii libyaml-perl 1.13-1
-- no debconf information
Reply to: