rpms/glibc
7
0
Fork 1
Code Issues Pull Requests Releases Activity

Migrate License field to SPDX identifiers (RHEL-25850)

Browse Source 
This commit (a) expands on and corrects some errors in the long
comment describing various licenses used in glibc preceding the
License field; and (b) migrates the License field to SPDX identifiers
based on an analysis of glibc-2.39 sources done using the ScanCode
toolkit.

Resolves: RHEL-25850

Fedora 40 commit: aa075b2434
This commit is contained in:
Arjun Shankar 2024-04-16 12:00:17 +02:00
parent 797647f2a8
commit 0357db879b
1 changed files with 52 additions and 19 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

63
glibc.spec
View File

@ -171,35 +171,61 @@ Version: %{glibcversion}
# - It allows using the Release number without the %%dist tag in the dependency # - It allows using the Release number without the %%dist tag in the dependency
# generator to make the generated requires interchangeable between Rawhide # generator to make the generated requires interchangeable between Rawhide
# and ELN (.elnYY < .fcXX). # and ELN (.elnYY < .fcXX).
%global baserelease 2 %global baserelease 3
Release: %{baserelease}%{?dist} Release: %{baserelease}%{?dist}
# In general, GPLv2+ is used by programs, LGPLv2+ is used for # Licenses:
#
# High level license status of the glibc source tree:
#
# * In general, GPLv2+ is used by programs, LGPLv2+ is used for
# libraries. # libraries.
# #
# LGPLv2+ with exceptions is used for things that are linked directly # * LGPLv2+ with exceptions is used for things that are linked directly
# into dynamically linked programs and shared libraries (e.g. crt # into dynamically linked programs and shared libraries (e.g. crt
# files, lib*_nonshared.a). Historically, this exception also applies # files, lib*_nonshared.a). Historically, this exception also applies
# to parts of libio. # to parts of libio.
# #
# GPLv2+ with exceptions is used for parts of the Arm unwinder. # * LGPLv2 is used in a couple of places (e.g. time/timespec_get.c, by
# mistake).
# #
# GFDL is used for the documentation. # * GPLv2+ with exceptions is used for parts of the Arm unwinder.
# #
# Some other licenses are used in various places (BSD, Inner-Net, # * GFDL is used for the documentation.
# ISC, Public Domain).
# #
# HSRL and FSFAP are only used in test cases, which currently do not # * Some other licenses are used in various places (BSD, Inner-Net,
# ship in binary RPMs, so they are not listed here. MIT is used for # ISC, Public Domain, etc.).
# scripts/install-sh, which does not ship, either.
# #
# GPLv3+ is used by manual/texinfo.tex, which we do not use. # Licenses that make an appearance in the source tree but are not used:
# #
# LGPLv3+ is used by some Hurd code, which we do not build. # * HSRL and FSFAP are only used in test cases, which currently do not
# ship in binary RPMs, so they are not listed here.
# #
# LGPLv2 is used in one place (time/timespec_get.c, by mistake), but # * GPLv3+ is used by manual/texinfo.tex, which we do not use and a test and
# it is not actually compiled, so it does not matter for libraries. # some scripts that we do not ship, and so it is not listed here.
License: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL #
# * LGPLv3+ is used by some Hurd code, which we do not build.
#
# * A copyleft license is used in posix/runtests.c, but it is only a test
# case and so the license is not listed here.
#
# * A "PCRE License" is used by PCRE.tests, but it is only a test case and
# so the license is not listed here.
#
# * BSL-1.0 is only used by a test from boost and so the license is not
# listed here.
#
# * Unlicense is used in an OpenRISC 1000 file which we don't support.
#
# SPDX references:
# https://spdx.org/licenses
# https://docs.fedoraproject.org/en-US/legal/allowed-licenses
# https://gitlab.com/fedora/legal/fedora-license-data
#
# SPDX license string based on evaluation of glibc-2.39 sources by
# ScanCode toolkit (https://github.com/nexB/scancode-toolkit),
# and accounting for exceptions listed above:
License: LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.1-only AND LGPL-2.0-or-later AND Unicode-DFS-2015 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only
URL: http://www.gnu.org/software/glibc/ URL: http://www.gnu.org/software/glibc/
Source0: %{?glibc_release_url}%{glibcsrcdir}.tar.xz Source0: %{?glibc_release_url}%{glibcsrcdir}.tar.xz
@ -2312,6 +2338,13 @@ update_gconv_modules_cache ()
%endif %endif
%changelog %changelog
* Wed Feb 28 2024 Arjun Shankar <arjun@redhat.com> - 2.39-3
- Analyse glibc-2.39 sources for license information
- Migrate License field to SPDX identifiers for
https://docs.fedoraproject.org/en-US/legal/allowed-licenses/
https://docs.fedoraproject.org/en-US/legal/update-existing-packages
(#2222074)
* Wed Feb 7 2024 Florian Weimer <fweimer@redhat.com> - 2.39-2 * Wed Feb 7 2024 Florian Weimer <fweimer@redhat.com> - 2.39-2
- Ignore symbolic links to . in sysroot construction - Ignore symbolic links to . in sysroot construction