From owner-freebsd-ports@freebsd.org Thu Nov 19 15:35:05 2015 Return-Path: Delivered-To: freebsd-ports@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 23299A3347D for ; Thu, 19 Nov 2015 15:35:05 +0000 (UTC) (envelope-from feld@FreeBSD.org) Received: from out5-smtp.messagingengine.com (out5-smtp.messagingengine.com [66.111.4.29]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id EBF85185C for ; Thu, 19 Nov 2015 15:35:04 +0000 (UTC) (envelope-from feld@FreeBSD.org) Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id CB8D320B24 for ; Thu, 19 Nov 2015 10:35:03 -0500 (EST) Received: from web3 ([10.202.2.213]) by compute4.internal (MEProxy); Thu, 19 Nov 2015 10:35:03 -0500 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-sasl-enc:x-sasl-enc; s=smtpout; bh=jeLRu6hzoSwNlPg u+dj/+WGFm9A=; b=FE3uTwZtMV48ad1AiVWZvgpLMLu6VE2JGbunarKDpq02Xmp 9N1khP0AFgTuthq2KyGUxmHIAzJFMJSYvfqlWim2W6ghJoc2Vjgn3doJWEm2F5LT 5+yVD9bgVHQFGgwKSWEjK1fxWC9c24HmHMNteJCiC4eCNME3psRobR/JIU84= Received: by web3.nyi.internal (Postfix, from userid 99) id 94EDE10A42E; Thu, 19 Nov 2015 10:35:03 -0500 (EST) Message-Id: <1447947303.654619.444405505.416C0DA0@webmail.messagingengine.com> X-Sasl-Enc: qVoM4aQwnwRZ5VwWODpK/MLZbSgbM5V1xXu9W/Yic+lh 1447947303 From: Mark Felder To: freebsd-ports@freebsd.org, Roger Marquis MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain X-Mailer: MessagingEngine.com Webmail Interface - ajax-dab2dbe4 In-Reply-To: <20151118114839.431a3adf@fabiankeil.de> References: <20151118114839.431a3adf@fabiankeil.de> Subject: Re: License info Q Date: Thu, 19 Nov 2015 09:35:03 -0600 X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Nov 2015 15:35:05 -0000 On Wed, Nov 18, 2015, at 04:48, Fabian Keil wrote: > Roger Marquis wrote: > > > I need to get license info from a batch of ports and packages. > > > > Problem is not all the specified ports/pkgs are installed or have license > > info in their Makefile. Is there a reliable way to enumerate port or > > package license strings, preferably without fetching a package tarfile? > > No. Also note that the "license information" in the Makefiles is often > misleading[1] and thus not particular useful if you actually care about > license compliance. > > Unfortunately reporting incorrect license information seems to be > a waste of time so things are unlikely to improve any time soon: > https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=195807 > > Fabian I spent a *lot* of time trying to correct the BSD licenses to be BSD2 BSD3 or BSD4CLAUSE. I did an /ok/ job. It was a super pain. My conclusion is that we need to be very careful getting the licenses defined correctly, but even then we cannot make any promises they are correct. You can only license files, not "projects", so a license on a port should be considered "best effort guidance" and not a promise of accuracy. If you are doing something that actually requires you to get licensing information correct the only approach is to roll up your sleeves and look at each software manually. Consider trying to play with Apache RAT as well which -- rumor has it -- can do a decent job of programmatically detecting licenses. http://blog.feld.me/posts/2014/12/bsd-license-audit/ -- Mark Felder ports-secteam member feld@FreeBSD.org