Hacker News new | ask | show | jobs
by dralley 2011 days ago
> If you think I'm wrong, just put up a mirror of the RHEL8 (not CentOS8) SRPMs and see how long it stays up. Clearly they're not acting in the spirit of the GPL, even if they are in the letter.

The GPL doesn't require you make the sources public to everybody, just the people to whom you are distributing your software.

But Red Hat does provide sources, to everybody. They go above and beyond what the GPL actually requires.

3 comments

The ftp site does not contain sources for RHEL 8 (it's just sources for a bunch of add-on packages). The RHEL 8 sources are in git.centos.org, though not in SRPM form.

I know that GPL only requires Red Hat to provide sources on request to those receiving their binaries. But in principle the receiver can then legally redistribute those sources. Now AFAICT nobody's actually doing that redistributing. I don't know whether that's due to lack of interest, or due to some Red Had shenanigans that makes redistribution illegal/unattractive.

RedHat has to permit the redistribution per the GPL. But there is nothing stating that your support contract can’t be cancelled if you do it. (I don’t have any first hand knowledge of this, just a guess).
Grsecurity also uses this 'loophole.' Seeing this scheme go mainstream is really disheartening; I feel that it really undermines the intent and social value of the GPL.
It's supposed to be against the GPL, but no one is willing to chase it.
In what way is it "supposed to be against the GPL"?
See Bruce Perens's explanation: <https://perens.com/2017/06/28/warning-grsecurity-potential-c...>. The short story: adding a penalty to an action that the GPL allows is a restriction of that action, and the GPL does not allow setting additional restrictions. This has not been tested in court, as far as I know.
The same way something like "we can tell you, but then we'll have to kill you" would be against the spirit of the Freedom of Information Act.
> I don't know whether that's due to lack of interest, or due to some Red Had shenanigans that makes redistribution illegal/unattractive.

Red Hat is overly protective of their trademarks, and this includes CentOS, Fedora, CoreOS etc

Also, RHEL is packaging pieces of software that are not under GPL/LGPL. With permissive licenses, they could probably heavily restrict source redistribution and availability.

If half the userland is not available as source (patch and packaging included), a CentOS-like project would not be possible.

Effectively, if RedHat/IBM wanted, there are a lot of dick moves which could effectively kill Rocky.

>But Red Hat does provide sources, to everybody. They go above and beyond what the GPL actually requires.

If you had been around in the late 90s, their lip service was that they were far more than just "providing sources to everybody" (as if that's some feat), and far more about the spirit of GPL and the triumph of FOSS than what the GPL letter requires...

Of course that was lip service, like Google's "Don't be Evil", but don't go around pretending Red Hat is some benevolent "above and beyond GPL" entity...