Slashdot Mirror


EFF Defends Bruce Perens In Appeal of Open Source Security/Spengler Ruling (perens.com)

Bruce Perens co-founded the Open Source Initiative with Eric Raymond -- and he's also Slashdot reader #3872. "The Electronic Frontier Foundation has filed an answering brief in defense of Bruce Perens in the merits appeal of the Open Source Security Inc./Bradley Spengler v. Bruce Perens lawsuit," reads his latest submission -- with more details at Perens.com: Last year, Open Source Security and its CEO, Bradley Spengler, brought suit against me for defamation and related torts regarding this blog post and this Slashdot discussion. After the lower court ruled against them, I asked for my defense costs and was awarded about $260K for them by the court.

The plaintiffs brought two appeals, one on the merits of the lower court's ruling and one on the fees charged to them for my defense... The Electronic Frontier Foundation took on the merits appeal, pro-bono (for free, for the public good), with the pro-bono assistance of my attorneys at O'Melveny who handled the lower court case...

You can follow the court proceedings here

"Sorry I can't comment further on the case," Perens writes in a comment on Slashdot, adding "it's well-known legal hygiene that you don't do that." But he's willing to talk about other things.

"Valerie and I are doing well. I am doing a lot of travel for the Open Source Initiative as their Standards Chair, speaking with different standards groups and governments about standards in patents and making them compatible with Open Source."

60 of 132 comments (clear)

  1. Good job Bruce and EFF by 110010001000 · · Score: 5, Insightful

    Keep up the good fight. People like the Grsecurity folks are the scourge of the industry in my opinion.

    1. Re: Good job Bruce and EFF by 110010001000 · · Score: 2

      We like security, just not the "Gr" part.

    2. Re:Good job Bruce and EFF by gweihir · · Score: 1

      Indeed.

      --
      Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
    3. Re: Good job Bruce and EFF by Anonymous Coward · · Score: 2, Interesting

      Well, that's the thing, you see. Good security doesn't care about politics. From your perspective you've drawn the battle lines and ejected what you've been told is a threat to open source that won't go quietly. From another, you've been manipulated into removing a better alternative to the terrible security in the kernel as mandated and controlled by a few companies. I'm not saying what grsecurity ended up doing was right, but I am saying they were actively and aggressively forced into that corner, there is no moral high ground here.

    4. Re: Good job Bruce and EFF by 110010001000 · · Score: 1

      Sorry, there are more important things than "security". The way they go about it is a threat to the entire Open Source ecosystem. And you don't need to post anonymously - we all know who you are.

    5. Re: Good job Bruce and EFF by MrMr · · Score: 1

      That's a very strange opinion. One of the parties in "Bradley Spengler v. Bruce Perens" must have thought a lawsuit was a good idea, so why does that party not deserve to be caught up in it?

  2. Bruce - YOU ROCK by gavron · · Score: 5, Insightful

    Giving up mod privs for this thread by posting in it and IT'S WORTH IT!

    Bruce, I've been an FOSS advocate in every company I've worked in, for, managed, ran, owned, started, and directed.

    YOU are the champion of living the word.

    Thank you!

    Ehud Gavron
    Tucson AZ
    FAA CPL-H

  3. Who? by Gravis+Zero · · Score: 1

    Not sure who this Bruce guy that everyone keep talking about but to assert my superiority, I demand to fight him in an epic battle for the ages! ;)

    --
    Anons need not reply. Questions end with a question mark.
    1. Re:Who? by 110010001000 · · Score: 1

      Wrong. That was Vint Cerf.

    2. Re:Who? by 110010001000 · · Score: 1

      I apologize.

    3. Re:Who? by smallfries · · Score: 1

      You’re confusing Vint Cerf with Al Gore. It’s easy to do, but try to remember: Al was the real inventor.

      --
      Slashdot: where don knuth is an idiot because he cant grasp the awesome power of php
  4. Another frivolous suit? by macraig · · Score: 3, Insightful

    The entire proceeding reads like a personal grudge unsupported by facts and yet executed in the public court system. That would be the very textbook definition of frivolous.

  5. Re: Perens Is A Leech And Scammer by nmo.marques · · Score: 1

    Leave the shrooms mate

  6. It's hard to be defamed by the truth. by Grog6 · · Score: 1

    You can't sue someone just because they made you look like a tool.

    Especially if they're right. :)

    --
    Truth isn't Truth - Guliani
    1. Re:It's hard to be defamed by the truth. by macraig · · Score: 1

      You CAN sue the person, but your suit will be frivolous.

    2. Re: It's hard to be defamed by the truth. by UnknowingFool · · Score: 2

      Also they can counter sue for costs which happened in this case.

      --
      Well, there's spam egg sausage and spam, that's not got much spam in it.
    3. Re: It's hard to be defamed by the truth. by macraig · · Score: 1

      And they just might get SLAPPed by the judge. :-)

  7. Re:Bazinga! by gweihir · · Score: 1

    Well, at least somebody that can match the meaninglessness of his action in his personality got it.

    --
    Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
  8. not a ruling on the copyright issue itself by ooloorie · · Score: 2

    This was a defamation lawsuit. It didn't settle the issue of whether the copyright issue itself is prohibited.

    Perens' argument on the legal issue itself strikes me as dubious. He's claiming that GPL copyright automatically extends to separately distributed patches that, themselves, do not contain any of the GPL'ed code. I'm not sure why that would be the case, and I'm not convinced that that would be a ruling that would be in the interest of open source software, because it seems to put a lot of other open source software at risk of being considered "derivative works" of proprietary software.

    1. Re: not a ruling on the copyright issue itself by UnknowingFool · · Score: 3, Insightful

      I suspect it's because that they couldn't win on any copyright claim as Perens (as is anyone) can voice an opinion about copyright just like you just did above. If someone sued you for what you just wrote, that's the equivalent of what happened. Is Perens right about it? That was never the point. It was about trying to silence him.

      --
      Well, there's spam egg sausage and spam, that's not got much spam in it.
    2. Re: not a ruling on the copyright issue itself by ooloorie · · Score: 1, Insightful

      I suspect it's because that they couldn't win on any copyright claim as Perens (as is anyone) can voice an opinion about copyright just like you just did above.

      You're stating the obvious. I mean, Perens can obviously bloviate as much as he wants to on things he doesn't know anything about; god knows he's been doing that a lot throughout his career.

      Now answer me this: if this is a GPL violation, why don't the Linux kernel developers actually sue?

    3. Re: not a ruling on the copyright issue itself by UnknowingFool · · Score: 2

      Not the point. Suing him for stating an opinion even it's wrong is like me suing you for what you just posted.

      --
      Well, there's spam egg sausage and spam, that's not got much spam in it.
    4. Re: not a ruling on the copyright issue itself by UnknowingFool · · Score: 2

      Look at it from their perspective: from what I can see, it was the only remaining avenue open to them to protect their business after Bruce *very* publically broadcast that people stay away from them. This isn't the normal reaction to GPL violations that I can remember. Usually we hear of the softly softly approach, with companies being handled with kid gloves over many years to achieve compliance. A full on publicity stunt with an iron fist - yeah, there were serious politics at play there I think.

      Even if everything you said is right, that means that any restaurant reviewer can be sued for telling their listeners to stay away from a restaurant. Any movie reviewer on YouTube can be sued by telling people to avoid the movie. Also that presumes that any company looking to do business with them was turned away only by Perens' opinion and that they didn't consult with their own experts.

      Let me quality all that by saying trying to EULA their patches at the end was certainly a big mistake. However, I can understand why they had that reaction. Ostracised by the mainstream kernel, they set up shop (without EULA) only to eventually find a project to reincorporate their code into mainstream minus authorship. Correct me if I'm wrong, but that reeks of hypocrisy, and is no less a copyright infringement as anything else in this sordid affair. It's certainly soured my view of Linux and the whole "Open Source" movement.

      All of which as nothing to do with Perens being able to express himself. Richard Stallman has some very staunch opinions about how Open Source should be. No one is suing him.

      Personally, I would have taken the lawsuit as a win, as what you basically have is a court saying Bruce was offering his opinion as Joe T Shlubb, not as a professional (correct me if I'm wrong?) I guess by then the damage was done, though.

      You understand that Perens had to spend money to defend himself against a lawsuit that the court dismissed. Also the latest development is that now Perens has to defend against the appeal so he would have had to keep spending money after he won if he was not represent pro bono.

      --
      Well, there's spam egg sausage and spam, that's not got much spam in it.
    5. Re: not a ruling on the copyright issue itself by UnknowingFool · · Score: 1

      That would be the restaurant equivalent of saying "the place was knowingly serving up endangered species, and now that I've told you that you should consult a lawyer as you could be held as an accessory.

      No it's not remotely similar. Your statement presents a fact which can proved as false or true. Your statement also alleges that the restaurant has done something illegal. Perens clearly stated his opinion on not what the plaintiff did or did not do (which plaintiff doesn't deny) but rather on his clear opinion on what he thinks it means.

      This is my personal opinion, but I am a world renowned expert witness on endangered species law." I know that's a bit strained, but I hope you understand what I see as being the difference there. I did question Bruce over how exposed his comments made him at the time, but then I am obviously neither a lawyer nor have the faintest idea about the US legal system.

      Again you are not using the same analogy. You've extended the analogy. A better analogy would have been if Perens said he thinks Nixon should have gone to jail for the Watergate scandal. If Nixon were alive, should Nixon sue Perens for clear opinion? Nixon could always sue but the judge in that case would have ruled a summary judgment too. As a "I am a world renowned expert witness on endangered species law", you should know what summary judgment means.

      Again, your analogy changed the situation.

      --
      Well, there's spam egg sausage and spam, that's not got much spam in it.
    6. Re: not a ruling on the copyright issue itself by UnknowingFool · · Score: 1

      Do you always resort to insulting people who respond the way you want them to respond?

      --
      Well, there's spam egg sausage and spam, that's not got much spam in it.
    7. Re: not a ruling on the copyright issue itself by UnknowingFool · · Score: 1

      We disagree over emphasis and analogy, so I doubt we'll get any further arguing back and forth. In addition, you misread part of my analogy as something you thought I claimed I was. You really should check your reading comprehension before opining further.

      You introduced criminality into the analogy above thereby changing the whole analogy. You've also changed Perens' actual claims of his expertise. Specifically you failed to mention this part of Peren's blog: "I am an intellectual property and technology specialist who advises attorneys, not an attorney. This is my opinion and is offered as advice to your attorney. Please show this to him or her. Under the law of most states, your attorney who is contracted to you is the only party who can provide you with legal advice." You changed what was said and ask me to check my reading level?

      --
      Well, there's spam egg sausage and spam, that's not got much spam in it.
    8. Re: not a ruling on the copyright issue itself by UnknowingFool · · Score: 1

      Yes, that's correct, that was the entire point. What did you assume the issue was? Perhaps criminality instead of civil law is hyperbolic, but I'd have thought it would have been obvious enough to get the point across.

      So you admit to changing the context of the conversation? Doesn't that makes your point moot then?

      I most certainly have not. I gave a direct quote [perens.com] of the title and leading sentence of his blog post on the subject. I made no assertion of his claims of expertise whatsoever (see my comment below also)

      What does "expert in [XXXX] law" mean to you? That means a lawyer. You'd be hard to find anyone who has an expertise in law not to be a lawyer. And Perens has stated that he is not a lawyer which you failed to mention.

      I did not change what was written, anyone can verify that, and I'll ask you not to continue making false claims. You'll note I was extremely careful in making my analogy in that I explicitly mention an expert witness, and not an attorney; this being the closest analogy.

      Again. An expert in law is generally a lawyer. You NEVER stated he was merely an expert witness which is not the same thing as an expert in "law". The word "law" being use changes the expertise significantly.

      And yes, I again urge you to carefully re-read the post. Please don't take it as a throwaway insult, I am seriously suggesting you re-read if you did not already do so. I note that others have also complained to you on the comments under this story that you've misread what they've said, too.

      And I urge you to be careful with words you use. An "expert in law" means something. In the legal profession, lawyers have to be careful to use the terms "Law Office" vs "Law Firm" as well as "Attorney-at-law" vs "graduated law school".

      --
      Well, there's spam egg sausage and spam, that's not got much spam in it.
  9. Re:Those legal costs.. by Anonymous Coward · · Score: 1

    Nah, your just a troll trying to divide allies. The US and Europe are both very fine places to live. :)

  10. Re: Perens Is A Leech And Scammer by UnknowingFool · · Score: 1

    So by your argument I can sue you for voicing an opinion about whether Perens should be sued.

    --
    Well, there's spam egg sausage and spam, that's not got much spam in it.
  11. That's precisely what derived means by raymorris · · Score: 2

    Suppose you write a novel. Perhaps, like Stephen King, you're living in a broken down trailer with no telephone when you're book sells 13,000 copies, netting you $2,500. Then someone turns your book into a movie. The movie doesn't have any pages of the book read aloud in the movie. It doesn't "contain" the book per session, it's a transformation, an adaptation, of the book. The author is entitled to a share of the movie revenue because it's his novel, adapted to the screen. That's a derivative work. "Derived from" doesn't mean "contains".

    1. Re:That's precisely what derived means by ooloorie · · Score: 1

      It doesn't "contain" the book per session, it's a transformation, an adaptation, of the book

      A movie is a transformed version of the original novel.

      A patched kernel is a transformed version of the original kernel.

      A kernel patch is not a transformed version of the original kernel.

      That's a derivative work. "Derived from" doesn't mean "contains".

      Under your standard, a commentary on a movie is "derived from" the movie even if it doesn't contain any content at all from the movie. I consider that undesirable.

    2. Re:That's precisely what derived means by phantomfive · · Score: 1

      In most cases, the patch would be utterly unusable, indeed wouldn't make sense, without the Linux kernel.

      To understand, consider a patch that wouldn't be a derivative work: imagine NVidia writes a windows driver for their video card. It's 50,000 lines of code. Then they write a small compatibility layer to get the driver running on Linux. In that case, the driver would likely not be a derivative work, because most of it is orthogonal to the Linux kernel.

      With the grsecurity patches, the entire reason they exist is to modify the Linux kernel. If the kernel didn't exist, they wouldn't either. It's hard to argue they are not a derivative work.

      --
      "First they came for the slanderers and i said nothing."
    3. Re:That's precisely what derived means by squiggleslash · · Score: 1

      Under your standard, a commentary on a movie is "derived from" the movie even if it doesn't contain any content at all from the movie. I consider that undesirable.

      I am not a lawyer, but I was under the impression that commentary is "protected" as fair use. If something is fair use, then it's technically breaching copyright, but the copyright holder isn't (usually) able to enforce their copyrights because other laws, or the constitution, take precedence over copyright law in that instance.

      So his standard is perfectly reasonable, if you remember that just because something violates copyright it doesn't mean you can enforce copyright law to stop it.

      --
      You are not alone. This is not normal. None of this is normal.
    4. Re:That's precisely what derived means by ooloorie · · Score: 1

      With the grsecurity patches, the entire reason they exist is to modify the Linux kernel. If the kernel didn't exist, they wouldn't either. It's hard to argue they are not a derivative work.

      So your criterion is that "if X wouldn't exist without Y then Y's copyright applies to X"? If that's the principle, then you can kiss FOSS goodbye.

    5. Re:That's precisely what derived means by ooloorie · · Score: 1

      I am not a lawyer, but I was under the impression that commentary is "protected" as fair use

      The commentary itself is a new work with a new copyright; it is neither a copy of the original work nor a transformation of it.

      As part of writing the commentary, you are allowed to copy parts of the work you are commenting on under the "fair use" doctrine. That is the sense in which "fair use" applies to commentary.

    6. Re:That's precisely what derived means by shutdown+-p+now · · Score: 1

      Do you understand the very definition of the word "patch"? A patch is inherently a derived work.

      And if X is a derived work from Y, then licensing terms of X apply. This has always been the case, it's not some new concept. Indeed, GPL (a large part of FOSS) is built on that concept.

    7. Re:That's precisely what derived means by phantomfive · · Score: 1

      This isn't even a point grsecurity disputes: they know it is a derivative work, and their work is released under the GPL. As far as that goes, they aren't in violation. It's the "extra" terms they add in the contract that is under dispute.

      --
      "First they came for the slanderers and i said nothing."
    8. Re:That's precisely what derived means by ooloorie · · Score: 1

      A patch is inherently a derived work.

      As I was saying:

      A movie is a transformed[/derived] version of the original novel.

      A patched kernel is a transformed[/derived] version of the original kernel.

      A kernel patch is not a transformed[/derived] version of the original kernel.

      Do you understand the very definition of the word "patch"?

      Do you?

    9. Re:That's precisely what derived means by ooloorie · · Score: 1

      they know it is a derivative work, and their work is released under the GPL

      Notice how you say "their work is released"? Thanks for proving my point.

      This isn't even a point grsecurity disputes:

      Well, obviously they do, otherwise they wouldn't be applying the extra terms, since they obviously can't apply extra terms to someone else's GPL'ed code, but they can apply it to their own.

    10. Re: That's precisely what derived means by phantomfive · · Score: 1

      A derivative work doesn't belong to the original creator. The kernel devs can't sue grsecurity and "steal" their work, but the creator of the derivative work has obligations to the creator of the original work under the law. Grsecurity is accused of not following those obligations.

      --
      "First they came for the slanderers and i said nothing."
    11. Re: That's precisely what derived means by ooloorie · · Score: 1

      A derivative work doesn't belong to the original creator.

      Discussing who the software "belongs to" is a red herring and legally irrelevant. What matters is that if you distribute the derivative work, you must comply with all legal obligations you have, under the original GPL, under the patches, and under any other legal agreements you have entered.

      but the creator of the derivative work has obligations to the creator of the original work under the law

      The GPL only imposes obligations when you distribute, not when you create derivatives.

      Grsecurity is accused of not following those obligations.

      Grsecurity has no obligations under the kernel GPL because they aren't distributing the GPL'ed kernel code. All they distribute is patches. The derivative work is created by the people who are applying the patches to the original kernel. And those people then cannot redistribute the combined work under their legal agreement with Grsecurity.

      This is pretty much the same when you work for a corporation and use GPL code: you may be creating derivative works from the GPL'ed software as part of your job, but you cannot redistribute that because your employment contracts forbids it, even though the GPL allows it.

    12. Re: That's precisely what derived means by phantomfive · · Score: 1

      Grsecurity has no obligations under the kernel GPL because they aren't distributing the GPL'ed kernel code. All they distribute is patches. The derivative work is created by the people who are applying the patches to the original kernel. And those people then cannot redistribute the combined work under their legal agreement with Grsecurity. This is pretty much the same when you work for a corporation and use GPL code: you may be creating derivative works from the GPL'ed software as part of your job, but you cannot redistribute that because your employment contracts forbids it, even though the GPL allows it.

      Yes, this is GRSecurity's argument. GRSecurity's contract doesn't even forbid you from redistributing it (which actually would be illegal). They merely say they will punish you if you redistribute it.

      Bruce points out that actually they are actively discouraging people from redistributing, and he claims it is illegal. I think he's right on that point, if it went to court I don't think GRSecurity would win (but who knows). Bruce also suggests that anyone who uses GRSecurity would be liable for infringement (by using code that GRSecurity infringed on). This second argument of his doesn't make as much sense to me, but again, if it went to court, who knows.

      --
      "First they came for the slanderers and i said nothing."
    13. Re: That's precisely what derived means by phantomfive · · Score: 1

      They can sue for copyright infringement for creating a derivative work without permission, as you said, but they can't sue to gain ownership of the derivative work.

      --
      "First they came for the slanderers and i said nothing."
    14. Re: That's precisely what derived means by phantomfive · · Score: 1

      No, that's a misunderstanding. The courts use the abstraction, filtration, comparison test to determine what is a violation and what is not.

      --
      "First they came for the slanderers and i said nothing."
  12. Re:Never seen a patch? by ooloorie · · Score: 1

    Are you so inexperienced with UNIX that the only patch format you have ever seen is a context diff?

  13. Re:Never seen a patch? by smallfries · · Score: 1

    Please enlighten us oh great unix guru:

    What type of patch does not specify which content is being deleted as part of the edit?

    --
    Slashdot: where don knuth is an idiot because he cant grasp the awesome power of php
  14. Re:Using this argument... by amiga3D · · Score: 1

    But to Oligarchs like Larry Page, Jeff Bezos and Bill Gates it makes perfect sense.

  15. Re:Never seen a patch? by ooloorie · · Score: 1

    What type of patch does not specify which content is being deleted as part of the edit?

    "diff -e"

  16. Re:Never seen a patch? by ooloorie · · Score: 1

    You could come up with a patch format that doesn't. Simply mention the line numbers to delete.

    You don't have to come up with it, it has been around since V7 and since before context diffs: diff -e

    If you wanted a context diff but didn't want to include the literal context, you could replace the context by a hash of the context.

  17. So much winning... by gosand · · Score: 1

    by lawyers I mean. It's really a shame that so much money is spent on things like this, and other frivolous legal actions. While hopefully the right people are vindicated by this (you know who you are, Bruce), the only ones who really win are the lawyers. Their profession is such a twisted self-fulfilling prophecy of sorts.

    --

    My beliefs do not require that you agree with them.

  18. Re:Never seen a patch? by smallfries · · Score: 1

    Ok, that is a fair point. I had not seen that option before.

    So rewinding a couple of steps to the part of the argument that led here:

    Assume that a patch is created as an ed script, it does not contain any of the kernel code. Its only use is to transform the kernel source. Who owns the coyright on the transformed source that results after the patch is applied?

    --
    Slashdot: where don knuth is an idiot because he cant grasp the awesome power of php
  19. Re:gweihir = fake name massive human fail... apk by gweihir · · Score: 1

    a) I know this is not APK, as I actually am able to communicate with people directly and openly, something you obviously have never mastered.

    b) Is that all you have? A smart 12 year old can do better. I guess you based these "insults" on the defects and fears of your own person. Here is a hint: That does not work in me, I am way out of your league. Some sophistication is required (look it up).

    c) You are pissed at me because I am not pathetic, unlike you? Nice! Makes my day. Thanks for that and keep the inept trolling coming.

    --
    Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
  20. Re:Never seen a patch? by ooloorie · · Score: 1

    Its only use is to transform the kernel source. Who owns the coyright on the transformed source that results after the patch is applied?

    Original Linux Kernel: Linux kernel authors hold the copyright and define copy terms for the kernel. Since that's the GPL, you can redistribute it under the GPL.

    Patch: patch authors hold the copyright and define copy terms for the patch itself. If that prohibits redistribution, it can't be redistributed.

    Patched kernel: both the Linux kernel authors and the patch authors hold a copyright in the result. When copying the combined work, you must comply with the terms of both the Linux kernel authors and the patch authors. One license permits redistribution, the other one doesn't, so the combined work can't be redistributed.

    Keep in mind that the GPL allows for proprietary modifications; that is, if you modify and deploy GPL software in-house, you are not required to share your modifications. This was the express intent of the authors of the GPL. Furthermore, if you are a company and you have employees modify GPL software as part of their job, they can't just take the modified software and publish it; they are still bound by their employment agreements. Proprietary patches like this really are not all that different.

  21. Re:Those legal costs.. by HornWumpus · · Score: 1

    Both Europe and The US are big places. Both have many fine places to live.

    Than you have places like Decatur Illinois and Scotland. Places where they would stick the tube to give the content an enema.

    --
    John McAfee 'It was like that time I hired that Bangkok prostitute; to do my taxes, while I fucked my accountant'
  22. Actually they can't due to GPL trademark by raymorris · · Score: 1

    You're not allowed to call just any license "GPL". Only the GPL license can be called by that trademark name. The GPL does not allow adding clauses. Therefore it cannot be licensed "GPL with additional clauses".

    They have said their software is GPL licensed. Therefore if they try to say "no, we mean our own special 'GPL', with extra terms added", that would violate the GPL trademark.

    1. Re:Actually they can't due to GPL trademark by ooloorie · · Score: 1

      They have said their software is GPL licensed. Therefore if they try to say "no, we mean our own special 'GPL', with extra terms added", that would violate the GPL trademark.

      That might be the case, but that's a different claim from what Perens claims. Perens claims that they violate the GPL on the kernel.

      Now, I have no reason to believe that they distribute their patches to paying customers under the GPL; do you know?

  23. PS could be similar to GPL license and not use GPL by raymorris · · Score: 1

    PS I forgot to say they COULD legally use a license that is similar to thr GPL, but different, and call it by a different name. They haven't chosen to do that. At least, under trademark they could.

    If they chose to do that, they wouldn't be violating trademark, but since they are distributing things copy-pasted from the GPL kernel, it's a derivative work and would violate the license.

    Bottom line:
    If you sell a modified version of GPL software, it as to be GPL licensed, and you can't change the GPL to whatever you want it to be. Playing games doesn't work, you just end up falling into a different kind of violation.

  24. Re:PS could be similar to GPL license and not use by ooloorie · · Score: 1

    If you sell a modified version of GPL software,

    But they aren't. They are neither selling kernel sources nor are they distributing kernel sources. All they are distributing is their own patches. It is the end user that creates the "modified version of GPL software".

    I forgot to say they COULD legally use a license that is similar to thr GPL, but different, and call it by a different name. They haven't chosen to do that.

    How do you know what license they distribute their kernel patches under to paying customers? Are you a paying customer?

  25. It's easy to find on their web site by raymorris · · Score: 1

    > How do you know what license they distribute their kernel patches under to paying customers?

    It's stated quite plainly on their web site. It'll be the top result if you Google "grsecurity license". (Kinda sad you didn't bother to Google it before arguing about it.)

    > They are neither selling kernel sources nor are they distributing kernel sources. All they are distributing is their own patches. A patch IS modified kernel sources. Here's a trivial kernel patch so you can see what they look like:

            printk("comedi%d: ni_labpc: %s, io 0x%lx", dev->minor, thisboard->name,
                                  iobase);
            - if (irq) {
            + if (irq)
                            printk(", irq %u", irq);
            - }
            - if (dma_chan) {
            + if (dma_chan)
                            printk(", dma %u", dma_chan);
            - }
                    printk("\n");

                    if (iobase == 0) {

    It starts with a couple lines exactly as in the original, unchanged. Then where a line is changed, it has the original line, with a "-" mark added, then the transformed version, marked with a "+".

    It's not only the new lines derived from the original (a derivative work), but also which lines to remove, copy-pasted exactly from the original GPL kernel. You can't copy-paste from the original kernel OR distribute your modified version of those source lines without complying with the GPL. A kernel patch generally does both.

    1. Re:It's easy to find on their web site by ooloorie · · Score: 1

      It's stated quite plainly on their web site. It'll be the top result if you Google "grsecurity license". (Kinda sad you didn't bother to Google it before arguing about it.)

      I'm way ahead of you. That is what they distribute public patches under.

      It's not only the new lines derived from the original (a derivative work), but also which lines to remove, copy-pasted exactly from the original GPL kernel.

      Most people assume that context diffs consider fair use, just like quotations, and hence do not fall under the GPL. But if this were the origin of a copyright claim, then they could switch to non-context diffs.

      You've put up a bunch of red herrings. Nothing you have said addresses the core question: in what way does Grsecurity's distribution of patches violate the GPL.

      Furthermore, my point remains: if creating some work that depends on a GPL'ed work but does not include it constitutes a GPL violation, then the same principle would apply to other copyrighted works, and that would be really bad for FOSS.