nmap: copyright check, repack (Re: nmap: help wanted?)

Lukas Schwaighofer lukas at schwaighofer.name
Thu Sep 7 19:38:38 UTC 2017


Hi,

bad news: we have to repack nmap. While trying to go through all the
files I found the first real problem: mswin32/IPExport.h. The file
contains "Copyright(c) Microsoft Corp., 1990-1999" with no other
license terms.

I searched online for the file to see if maybe Microsoft released that
file later with a permissive license.  Instead I found a slightly
updated version [1] with a very clear statement:

    Use of this sample source code is subject to the terms of the
    Microsoft license agreement under which you licensed this sample
    source code. If you did not accept the terms of the license
    agreement, you are not authorized to use this sample source code.

Is it ok if I prepare a repacked version?

Now that we have to repack anyways:  Would it be acceptable to remove
any other subprojects (like libpcap, libpcre, …) from the nmap
distribution that we do not use?  This has several advantages:
* Simplifies writing debian/copyright *a lot* (I expect this would
  save me at least ~5 hours of work).  Honestly this is really my main
  motivation here, I'd rather do something more interesting with my
  time (but if it needs to be done I'll still do it over time).
* It ensures that we do not accidentally link against any of those
  subprojects if they are not there any more.
* It will make autoreconf easier (with the suggested patch applied, we
  can directly use dh-autoreconf and do not need to use the
  `--no-recursive` option)

In case repacking without the subprojects is ok, I can probably finish
writing the debian/copyright file on the weekend.  Otherwise it will
take me until the end of next week at least.

Thanks & regards
Lukas

[1] http://ftp.icpdas.com/pub/beta_version/VHM/wince600/at91sam9g45m10ek_armv4i/cesysgen/sdk/inc/ipexport.h



More information about the Pkg-security-team mailing list