nmap: copyright check, repack (Re: nmap: help wanted?)
Lukas Schwaighofer
lukas at schwaighofer.name
Thu Sep 7 19:38:38 UTC 2017
Hi,
bad news: we have to repack nmap. While trying to go through all the
files I found the first real problem: mswin32/IPExport.h. The file
contains "Copyright(c) Microsoft Corp., 1990-1999" with no other
license terms.
I searched online for the file to see if maybe Microsoft released that
file later with a permissive license. Instead I found a slightly
updated version [1] with a very clear statement:
Use of this sample source code is subject to the terms of the
Microsoft license agreement under which you licensed this sample
source code. If you did not accept the terms of the license
agreement, you are not authorized to use this sample source code.
Is it ok if I prepare a repacked version?
Now that we have to repack anyways: Would it be acceptable to remove
any other subprojects (like libpcap, libpcre, …) from the nmap
distribution that we do not use? This has several advantages:
* Simplifies writing debian/copyright *a lot* (I expect this would
save me at least ~5 hours of work). Honestly this is really my main
motivation here, I'd rather do something more interesting with my
time (but if it needs to be done I'll still do it over time).
* It ensures that we do not accidentally link against any of those
subprojects if they are not there any more.
* It will make autoreconf easier (with the suggested patch applied, we
can directly use dh-autoreconf and do not need to use the
`--no-recursive` option)
In case repacking without the subprojects is ok, I can probably finish
writing the debian/copyright file on the weekend. Otherwise it will
take me until the end of next week at least.
Thanks & regards
Lukas
[1] http://ftp.icpdas.com/pub/beta_version/VHM/wince600/at91sam9g45m10ek_armv4i/cesysgen/sdk/inc/ipexport.h
More information about the Pkg-security-team
mailing list