Slashdot Mirror
Enforcing the GPL On Software Companies?
Piranhaa"I currently use an IPTV box that runs software by Minerva Networks. When you ssh into the box, you are greeted with a BusyBox v1.00 (ash) shell. It's clearly running a flavor of Linux (uname -apm outputs: Linux minerva_10_0_3_99 2.4.30-tango2-2.7.144.0 #29 Wed Mar 16 16:16:16 CET 2005 mips unknown). However, when you look at their Web site there is no publicly available source code. Since the GPL in both BusyBox and the Linux kernel require that anyone using and distributing the binaries of this software make source available to everyone, what would one do in order to enforce this? I've personally emailed Minerva and left voicemails with no reply."
IANAL but as I understand it the GPL requires that source is made available to customers, not everyone. Of course in this case they don't appear to be making it available to customers either.
They are distributing the software and have to provide an offer of the source. I am sure this came up with distributions who were basing their distro off Ubuntu and assumed their customers could get the source from there.
When you think about it, it makes sense. Even if they base their software off a distribution from a known source that source might not be around when it is needed.
http://michaelsmith.id.au
He requested. Read the summary.
http://www.gpl-violations.org/
might be a good place to start.
living the dream
You could notify the authors (and copyright holders) of BusyBox.
Unlike Linus, they are pretty strict on companies infringing on the GPL, and have sued (and won) several times.
Take a look at gpl-violations.org or google "busybox gpl violation" for more information.
"Oh, a lesson in not changing history from Mr I'm-my-own-Grandpa." - Dr Hubert Farnsworth
No you don't. If you distribute any version of a GPLed piece of software, you must make the source available upon request to the person you distributed it to. Modification is irrelevant. Modification only matters when you modify something for your own use and do not distribute it- then you don't have to provide source because there's no one to provide it to.
However, this does not mean you need to put it up on a webpage for everyone to download, or provide it on the disk. The GPL requires only a written offer of source code upon request, at a cost of no more than shipping and the media. I have no idea if this particular vendor is complying, but not having a link on their webpage does not mean non-compliance.
I still have more fans than freaks. WTF is wrong with you people?
# ls /src
ls: /src: No such file or directory
First place I checked actually =)
The system only comes with 60MB of non-volatile flash on a jffs(2) filesystem and 32MB are free.
I know you're joking, but section 6 of the GPL prevents this most commonly by using the phrase: "on a durable physical medium customarily used for software interchange."
The GPL is a very carefully written document.
I touch computers in naughty places
Last year BusyBox successfully enforced their copyrights in at least two instances. While the terms of the settlements have not been disclosed, I'm sure the SFLC will be happy to get involved again.
As the parent says, only the copyright holder can actually take any legal action.
For busybox, you can see on http://busybox.net/license.html that:
"BusyBox's copyrights are enforced by the Software Freedom Law Center (you can contact them at gpl@busybox.net)"
This an effective process, but a slow one (expect it to take 6 months+ for any response on past experience).
For the linux kernel, lkml is perhaps an appropriate place.
FSF can't help, since they don't own any of the software.
You perhaps want to consider how you're wording your requests. If a polite (or impolite) request for source code has been refused, you might want to try a different track, pointing out that the hardware contains software that they have no valid license to distribute and is hence illegal, and would they like to discuss this further before you contact the copyright owner.
Under copyright law, there is absolutely no requirement for them to provide the source code. One possible legal conclusion is that they pay court decided damages to the copyright owners for illegal distribution to date, and cease further distribution. If they wish to continue distribution, it's likely that they're only available option is to open the source code, especially since their are often multiple copyright holders, especially in the linux kernel.
(Disclaimer, I'm not a lawyer, and some points will vary between jurisdictions.)
You may want to send your legal department a copy of the GPL, and possibly a copy of the accompanying FAQ, which explains things in terms simple enough for non-lawyers or even just really confused lawyers to understand.