[Pkg-giraffe-discuss] z-push packaging question - licenses / lintian

Roel van Meer roel at 1afa.com
Wed Dec 28 08:10:55 UTC 2016


Guido Günther writes:

> > The problem is that a number of PHP files (derived from Pear files) are
> > listed in the copyright file as having the PHP-2.02 license, and according
> > to Lintian this license is only valid for the PHP interpreter itself, not
> > for code written in PHP, nor for Pear modules. The specification of this
> > license is correct, however, as this license is indeed named in the PHP
> > files themselves.
> >
> > Now, when I look at official Debian packages that provide the original
> > version of these files, then the files themselves also mention the PHP-2.02
> > license, but the d/copyright file lists them under a different license
> > (BSD-3-clause, or PHP 3.01).
>
> "original version" sounds as if these were embedded code copies. If so
> you can just drop them from the upstream tarball (adding a +dfsg to the
> version number). This is also much better from a security pov.

Well, these are modified copies. So unfortunately that's not an option.

Thanks,

Roel




More information about the Pkg-giraffe-discuss mailing list