Slashdot Mirror


Could Linux Still Go GPL3?

turnitover writes "Even though Linus has said 'The Linux kernel has always been under the GPL v2. Nothing else has ever been valid,' LinuxWatch is reporting that Richard Stallman has said it's ultimately up to the developers. And those on the LKML (Linux Kernel Mailing List) are going back and forth about whether to move to GPL3. The sticking point, not surprisingly, is the issue of DRM." In response to the DRM issue Linus wrote: "I personally think that the anti-DRM clause is much more sensible in the context of the Creative Commons licenses, than in software licenses. If you create valuable and useful content that other people want to be able to use (catchy tunes, funny animation, good icons), I would suggest you protect that _content_ by saying that it cannot be used in any content-protection schemes."

17 of 449 comments (clear)

  1. Ummm... by MightyMartian · · Score: 3, Interesting

    I don't know what the f*** Stallman is talking about. As Linus pretty much still rules the roost as to what officially goes into the kernel, how is it precisely, if he's so against GPL3, that GPL3 could make it into the kernel?

    --
    The world's burning. Moped Jesus spotted on I50. Details at 11.
    1. Re:Ummm... by Anonymous Coward · · Score: 1, Interesting

      Ummmmm because if you KNEW anything about Stallman you would know that he says Linux should be called GNU Linux as the kernel is only the kernel, Linux consist of a kernel AND a bunch of GNU applications. So if all the authors of those GNU applications changed to GPL3, then it would be only the kernel that was GPL2. Linus has control of the kernel and the trademark Linux, but Linux would be pretty damn boring if it was just the kernel and no GNU apps. So before read up and educate yourself.

    2. Re:Ummm... by nathanh · · Score: 2, Interesting
      Speaking of RMS, is it just me or does the GNU /. [slashdot.org] topic icon look like it is sucking it's thumb and holding a blanket. If it is, was this a stab at RMS?

      It's a very unsubtle stab at the GNU/Linux debate. The figure depicted is a GNU acting as the character Linus from the comic strip Peanuts.

    3. Re:Ummm... by Schraegstrichpunkt · · Score: 2, Interesting
      But are all contributions to the kernel "GPL v.2 only?"

      Nope, they aren't. In fact, many parts of the kernel are "v2 or later" or even BSD-licenced. In fact, Linux 2.0 never even *mentioned* a particular version in the README, so if it weren't for the individual file copyrights, it could be distributed under any version *ever* published by the FSF (see GPLv2 section 9). Linus apparently doesn't agree with that position now, but he's also not a lawyer.

  2. An issue of points of view by ToasterofDOOM · · Score: 4, Interesting

    All of the controversy over the GPL3 isnt so much caused by the details, but by the underlying mentalities. RMS is more of the belief that freedom is a necessity and everyone should do everything in an open, free manner, and that people can't be trusted. Torvalds sees freedom as more of a tool, a bonus, and people/businesses are generally trustworthy. I like to think of it that way, and that is why I prefer BSD/MIT style over other licences. Businesses will always make proprietary software, that won't change. Proprietary isn't bad, and prohibiting it only restricts what the user/developer can do.

    --
    I am Spartacus
    1. Re:An issue of points of view by MichaelSmith · · Score: 1, Interesting
      Torvalds sees freedom as more of a tool

      Torvalds built DRM into the kernel so that it could be used in commercial applications requiring DRM. RMS doesn't want DRM to be there at all.

    2. Re:An issue of points of view by bnenning · · Score: 2, Interesting

      Agreed. My EyeTV records in MPEG-4 and exports to any format I want with no DRM. Although the MPAA wishes it were otherwise, you don't (yet) have to get their permission before selling hardware. I guess being larger, TiVo has to be more conservative, but I'd think the increased revenue they'd get from putting the desires of their customers ahead of Hollywood would more than make up for potential court costs.

      --
      How to solve most of our problems: 1.Lots of nuclear plants. 2.Cure aging.
  3. Torvalds & Stallman and V3GPL by Real+World+Stuff · · Score: 4, Interesting

    The way I look at it, it is a matter of Apples and Oranges. Both men are correct in the spirit of the argument. I would just like to see a bit more cohesion regarding the Free/Oss community because I know this will get picked up and spun as "there Go Those In-Fighting Zealots". A case for each is made by Rick and Linus, with relevent information below.

    From Linux Devices: Stallman notes that the discussion draft of GPLv3 includes language aimed at preventing free software from being "twisted" into service by companies attempting to deprive people of freedoms provided by the copyright system. Those using free software to build DRM-encumbered systems would be obliged, under the proposed license, to share enough "signatures," or keys, so that users of the software retain "full control," he says.

    Another primary aim of the discussion draft of GPLv3 is to increase compatibility with other free software licenses that have appeared since the license was last revised 15 years ago, the interview suggests. This was done by making the license more tolerant of trademark clauses and patent retaliation clauses, such as those found in the Apache license. However, Stallman states that permissible retaliation clauses are limited to those addressing clear wrongdoing, adding that he hopes other license drafters will "decide to make their patent retaliations compatible." Empahsis mine

    Linus stated in his mail that "And quite frankly, I don't see that changing. I think it's insane to require people to make their private signing keys available, for example. I wouldn't do it. So I don't think the GPL v3 conversion is going to happen for the kernel, since I personally don't want to convert any of my code." Again, emphasis mine.

    In the end, the contributing developers AND the rights holders will determine what the outcome is.

    --
    If we don't fight for ourselves no one will.
  4. Fork Themselves by Doc+Ruby · · Score: 2, Interesting

    No, it's up to Linus. Developers can submit code under GPL3, or any other license. But it's up to Linus whether to include that code in his kernel source - if he accepts that incoming license, and abides by it, including the requirement that he release his new code with the inclusions under the new license. If Linus doesn't want to release a new kernel under GPL3, he can't include GPL3 code, and doesn't have to.

    However, if the contributors insist on submitting code with GPL3, and Linus declines to accept it, there's some legal arguments to be resolved before deciding whether they can fork the kernel and release it under GPL3, with his code. It depends on whether GPL2 code can be released under GPL3. I wonder what Eben Moglen has to say about that. But even if it's OK, that's still not "Linux". Linus owns the trademark, and cannot allow a fork which dilutes his trademark with a different product - he'd lose the trademark.

    --

    --
    make install -not war

  5. Scenarios by Michael+Woodhams · · Score: 5, Interesting

    Scenario A:
    Alan signs a Linux binary with his private key "A". He makes available public key "a". Many Linux installations are set to refuse to run binarys which are not signed to match one of the public keys they have in their "trusted keys" file, which typically include Alan's key "a". I can run a modified binary as follows: Create my own key pair "C" and "c". Add public key "c" to my trusted keys file. Modify, compile the program, sign the binary with "C". The program now runs.

    Scenario B:
    BadCorp's box has DRM-like hardware which refuses to run any code not signed by BadCorp's private key B. They use a modified, signed copy of Linux as the OS. They make available the source of their modifications (which are pretty much specific to their hardware) but nobody else can modify the kernel running on a BadCorp box because they don't have key B.

    I think scenario B is what the GPL v3 language is trying to forbid, and scenario A is why GPL v3 doesn't require Alan's private key to be released. However, I'm not sure what happens in

    Scenario C:
    BadCorp produce a box which won't run unsigned code, and which only they can add keys to the trusted keys file. DastardlyCorp produce modified GPL programs for the BadCorp box, sign the binaries with key "D" and pay BadCorp to add key "d" to the trusted keys file. DastardlyCorp won't release key "D" - "It's our private key. Get BadCorp to add your key to the box if you want to modify stuff. It is their fault, not ours, that you can't run on their box." BadCorp says "Only if you pay us money. We aren't bound by the the GPL - we don't release any GPLed software." (And BadCorp and DastardlyCorp just happen to be owned by the same people.)

    Scenario D:
    As above, but BadCorp unilaterally add Alan's key "a" to the trusted keys list. Now Alan can recompile for the BadCorp box, but other people can't - but Alan did not want this situation to be.

    How can the license force DastardlyCorp to release their key in scenario C, but not force Alan to release in scenario D?

    Disclaimer - I am not a lawyer, I have not followed this controversy closely. Better informed comment is invited.

    --
    Quattuor res in hoc mundo sanctae sunt: libri, liberi, libertas et liberalitas.
    1. Re:Scenarios by Michael+Woodhams · · Score: 2, Interesting

      I've thought of another interesting twist.

      You can't create a signature for a binary without reading and manipulating the contents of the binary - so a signature is a derivative work of the binary. The binary is of course derivative of the source. The source is under the GPL. So, if you release the signature, you must release the "source" of that signature, i.e. the private key.

      Under this theory, you can't release the signature for a binary of GPLed code without releasing the private key, even under GPLv2.

      I am still not a lawyer.

      --
      Quattuor res in hoc mundo sanctae sunt: libri, liberi, libertas et liberalitas.
    2. Re:Scenarios by asuffield · · Score: 2, Interesting

      Nearly right, but people have pointed out some of the gaps in your examples. Here's the slight variation that doesn't have them:

      Scenario P:

      BadCorp produce a box which won't run unsigned code, and which only they can add keys to the trusted keys file. ApostleCorp produce modified GPL programs for the BadCorp box, and publish the full source of their modified program on the internet. BadCorp produces only proprietary programs for the BadCorp box, with no GPLed code in them, but they do (for a fee) sign programs written by other people. ApostleCorp pay to have their program signed so that people can run it on BadCorp's box.

      The GPL prohibits this. Sounds unlikely? BadCorp is Sony, their box is the Playstation 2 (their signing system has been resoundingly defeated, but the intent was there and the Playstation 3 will probably have a harder version). You can boot linux on that thing, because it's GPLv2. If linux were GPLv3, there would be no playstation port of it. Sony will never release those keys and they will never care because they don't make any GPLed software.

      In shooting at companies who would use GPLed software in their own devices, the GPLv3 prevents anybody else from using it on those devices either. In a few years, if MS gets their palladium stuff working, that will probably include new PCs - you will not be able to run linux-based platforms on your desktop any more, not because MS banned it, but because the FSF did (they are aware of this problem and just don't care).

  6. Re:Sure, but when by MichaelSmith · · Score: 2, Interesting
    NOTHING in GPLv3 disallows implementing DRM with GPLv3 code. However there are some extra provisions that insure that if such implementations are made, the right to change that code (which is one of the most protected rights in the context of the GPL) can not be taken away from the users by a means of a DMCA-based lawsuits.

    Isn't this just a roundabout way of saying that you can build DRM into GPLv3 code but you must provide a backdoor for anybody to use to get around it?

    A bit like saying yes you can build that prison but it must have fire escapes like any other building.

  7. Re:I hope this serves as validation enough by sjvn · · Score: 4, Interesting

    While RMS and I have had our share of disagreements, I really don't see him following that trail of tears that was the glibc fuss. I really think that he's leaving it up to the kernel developers. And, yes, that's primarily, but, far, far from exclusively Linus. I'm sure he'd be happier if the kernel went GPL 3, but I don't see him trying to make some kind of power play here.

    Yes, I know some of you will find that impossible to believe, but I think that RMS is really not looking for a fight here.

    Steven

  8. Can it be both? by Spazmania · · Score: 2, Interesting

    Is it possible for parts of the Linux kernel to be GPL2 and parts to be GPL3? Its seems to me like GPL2's provisions would prevent coexistance with GPL3 -- GPL2 doesn't allow such ideological restrictions to be added to a derivative of a GPL2 work.

    If so then moving the kernel to GPL3 is likely impractical. Too much code has been contributed in the form of modules and patches and while the pedigree is well documented its far from perfect, particularly on the little patches. They can be presumed to have been offered under the general terms of Linux's distribution -- GPL2. Anything else would require an explicit statement from those individual authors.

    Under the circumstances, I wonder if Linus could legally release Linux under anything incompatible with the terms of GPL2 even if he wanted to.

    --
    Moderating "-1, Disagree" is simple censorship. Have the guts to post your opinion.
  9. Re:Alan Cox's View by blakestah · · Score: 3, Interesting

    Alan doesn't really address the issue at ALL. He says he doesn't like DRM, that is all.

    The issue here as I understand it is that under GPLV3, if you use DRM, you have to provide the keys. Which sorta ruins the whole thing. It says something like is cryptography is used to control function, then the source must be provided so that a recipient can recompile and have a functional binary ie: if function requires a digital key, the recipient must have the private key.

    An example. The linux kernel team releases a kernel. Bluehat, the newest kernel distro, teams up with Mactel. Mactel provides a motherboard and CPU that will only run Bluehat signed binaries.

    Under GPLV3, Bluehat needs to provide their private key with the kernel so that anyone can recompile an appropriately signed binary.

    Yet the whole point of signing the binary is exclusively identifying it as coming from Bluehat.

    So GPLV3 effectively prevents digital signatures from being used to determine if a binary may be from a source the user trusts!

  10. Re:Actually, it is Linus's choice by TheRaven64 · · Score: 2, Interesting
    Actually, there's an option 3, which is slowly leak developers to L4 HURD which has a few advantages from a developer standpoint:
    1. It will be GPLv3. (Note: If you don't like GPLv3, this counts as a disadvantage).
    2. It's a relatively young kernel, which means there are lots of interesting, but relatively simple, bits left to write (good for novice kernel hackers).
    3. It is a more interesting (and more scalable) design than Linux, which is based on 30-year-old OS design concepts.
    Somehow, I wouldn't be surprised if this was RMS' desired outcome.
    --
    I am TheRaven on Soylent News