Subject: pkg/19686: pkg_install+db2 license incompatiblity
To: None <gnats-bugs@gnats.netbsd.org>
From: None <fcusack@fcusack.com>
List: netbsd-bugs
Date: 01/04/2003 22:25:08
>Number: 19686
>Category: pkg
>Synopsis: pkg_install requires db2, but db2 has an incompatible license
>Confidential: no
>Severity: non-critical
>Priority: medium
>Responsible: pkg-manager
>State: open
>Class: change-request
>Submitter-Id: net
>Arrival-Date: Sat Jan 04 22:26:00 PST 2003
>Closed-Date:
>Last-Modified:
>Originator: Frank Cusack
>Release: NetBSD 1.6
>Organization:
>Environment:
System: NetBSD moltar.savecore.net 1.6 NetBSD 1.6 (moltar) #16: Sun Nov 17 22:42:13 PST 2002 root@moltar.savecore.net:/usr/src/sys/arch/sparc64/compile/moltar sparc64
Architecture: sparc64
Machine: sparc64
>Description:
pkgtools/pkg_install uses the system libdb, if present. If absent,
it requires db-2.7.7. But the license for Berkeley DB > 1.85
is incompatible with the license for pkg_install.
The db-2.7.7 and later license requires source code distribution for
any software that uses Berkeley DB, if that software is distributed
outside of a single physical location (such as multiple data centers).
While not a problem per se for pkg_install, since it's source code
/is/ available, if a local site modifies pkg_install to their own
ends they may be led to believe they can keep the changes private;
or that they can create a binary-only product based on pkg_install.
They cannot, if it is linked with db > 1.85.
The db license restriction is bogus and is extremely likely to be
invalid, but that's not a decision pkgsrc should make, especially
when 1) a different version of Berkeley DB with a compatible license
is available, and 2) libdb support is not an absolute required.
>How-To-Repeat:
>Fix:
Create a databases/db1 package. I have this locally and can
contribute it if desired.
>Release-Note:
>Audit-Trail:
>Unformatted: