[toyg]

1. Secretly take sources from a RH customer in a country with "friendly" laws;

2. Diff sources as necessary;

3. Publish diffs.

That would work fine, at least until RH starts fingerprinting patches per customer, which would be expensive and risky.

[maxloh]

Not every packages in RHEL is GPL. Red Hat could just refuse to offer source code for those licensed in permissive licenses.