LWN.net Logo

The state of the SCO case

The whole SCO affair started as a breach-of-contract suit against IBM. That suit is based on the language of the Unix contracts signed with ATT almost two decades ago, which reads:

AT&T grants to Licensee a personal, nontransferable and nonexclusive right to use Software Product solely for Licensee's own internal business purposes and solely on or in conjunction with Designated CPUs for such Software Product. Such right to use includes the right to modify such Software Product and to prepare derivative works based on such Software Product, provided the resulting materials are treated hereunder as part of the original Software Product.

The core of SCO's claim is that anything that IBM has ever allowed to be a part of a Unix system has become a "derived product" of Unix and must be treated as if it were Unix itself. SCO cannot make any ownership claims over this code - a side letter to the contract makes that explicit - but it does claim the right to keep IBM from disclosing its own code.

Through its public statements, SCO has since made claims of massive direct copying of SYSV Unix code into Linux. There is still no court case where SCO has made such claims, however. The company's experience at SCO Forum and subsequent public statements suggest that the evidence for direct copying of code - actual copyright violations - is weak at best. SCO might have a small case against SGI, depending on how a judge might choose to interpret the copyright status of 32V Unix and the true source of the ate_malloc() code. But that is between those two companies; the code in question has already been removed from current Linux kernels.

Increasingly, it seems that SCO is left with its original breach of contract case. The recently issued open letter from Darl McBride does nothing to change that impression; it mentions the ate_malloc() case but does not allege any other direct copying. Instead, the company's claims are expressed as follows:

To date, we claim that more than one million lines of UNIX System V protected code have been contributed to Linux through this model. The flaws inherent in the Linux process must be openly addressed and fixed.

In SCO's view, "Unix System V protected code" is a rather wider set than "SCO-owned code." In fact, at SCO Forum, the company put up a slide discussing the "more than one million lines" that it claims. Here's where they come from:

Subsystem Files Lines
Read-copy-update 46 109,688
NUMA 101 56,587
JFS 44 32,224
XFS 173 119,130
Symmetric multiprocessing 1,185 829,393
TOTAL 1,549 1,147,022

(SCO has posted the slides to its presentations on this page. You'll have to click past the cheery warning that things are optimized for Internet Explorer to view them, though.)

These claims are interesting in a number of ways. Let's look at the RCU claim for a moment. In a modern Linux kernel (RCU does not appear in 2.4), the RCU implementation is contained in two files (include/linux/rcupdate.h and kernel/rcupdate.c), which add up to an amazing 402 lines. That leaves us 44 files and 109,286 lines short of the claim made by SCO. Clearly, SCO must also be making claims on any code that uses RCU in any way. If you look for files that make any use of the RCU subsystem, the results are:

FileLines
arch/i386/oprofile/nmi_timer_int.c 57
drivers/char/ipmi/ipmi_kcs_intf.c 1275
fs/dcache.c 1641
include/asm-x86_64/kdebug.h 44
include/linux/rcupdate.h 135
include/linux/dcache.h 316
include/linux/list.h 565
include/net/dst.h 254
init/main.c 604
ipc/util.c 612
kernel/rcupdate.c 267
kernel/module.c 1949
kernel/sched.c 2594
net/802/psnap.c 160
net/bridge/br_device.c 147
net/bridge/br_forward.c 157
net/bridge/br_if.c 289
net/bridge/br_ioctl.c 309
net/bridge/br_input.c 159
net/core/netfilter.c 761
net/core/dev.c 3092
net/ipv4/af_inet.c 1250
net/ipv4/icmp.c 1120
net/ipv4/ip_input.c 433
net/ipv4/route.c 2797
net/ipv6/af_inet6.c 895
net/ipv6/icmp.c 787
net/ipv6/ip6_input.c 260
net/decnet/dn_route.c 1843
TOTAL 29 files24,772

So, even with such an expansive interpretion of SCO's claim, there are 17 files missing. They must be big files as well, since they must account for the remaining 84,916 lines. The "contamination" caused by RCU is evidently a very broad thing. We asked SCO where the missing files were, but were told only "[T]his level of detail is something that we will save for our court case in 2005." So we're going to have to remain in suspense for a while. But one thing is clear: SCO claims that the old AT&T licenses give it amazing powers over code that has ever breathed the same air as SYSV Unix. Anybody who claims that the GPL is overly "viral" or that it threatens intellectual property should take a good look at the powers that SCO claims its license gives it. The GPL can't compete in that league.

SCO's legal argument is interesting; the company claims that Linux hackers have, while having never actually seen the SYSV Unix source, nontheless created a derived product of SYSV Unix. They are accused of copying something they never had access to. This argument seems destined to fail; how can something which contains no SYSV code be a derived product of SYSV? But that is the core of SCO's argument.

An interesting question comes out of this: what if SCO wins its case? SCO will have then convinced a court that IBM released IBM's code in violation of an agreement it had with SCO. The fact that IBM released IBM's code, however, would not change. SCO does not own that code, how can it claim a right to payments from Linux users? If SCO wins, it may get a chunk of money from IBM. But it should still have nothing which entitles it to license payment from Linux users.

Returning to Darl McBride's open letter, we note that there are no demands that Linux users buy SCO "licenses," and no threats of suits against users. Mr. McBride, instead, has taken a bit of a different approach:

A sustainable business model for software development can be built only on an intellectual property foundation. I invite the Open Source community to explore these possibilities for your own benefit within an Open Source model. Further, the SCO Group is open to ideas of working with the Open Source community to monetize software technology and its underlying intellectual property for all contributors, not just SCO.

One might point out that the free software world does, indeed, have an "intellectual property foundation." It is based on copyright law, and free licenses, including the GPL, which SCO has said it wants to break. One might also point out that the community is not in much of a mood for "working with" SCO at this point. But one's time might be better spent pondering what SCO was thinking when it published those words.

SCO clearly wants to be able to put a tax on Linux systems. SCO also clearly sees the GPL as an obstacle; there is no way to make a tax stick to Linux as long as it remains freely redistributable. Could SCO be casting around for a scheme to buy off free software developers should its challenges to the GPL fail? A nice tax for SCO and a few bones tossed to developers willing to relicense their code? It is hard to see how such a scheme could possibly succeed, but it is also hard to find another way to interpret the words quoted above.

In summary, the SCO case remains interesting. SCO has changed its tune several times, but, for the moment, is back where it began: a breach of contract suit against IBM. The company has yet to produce any evidence that Linux users owe it money. It is also now interested in "working with the open source community." But SCO remains unpredictable. We have not yet seen the last strange twist in this case.


(Log in to post comments)

typo

Posted Sep 11, 2003 4:38 UTC (Thu) by xorbe (subscriber, #3165) [Link]

"So, even with such an expansive interpretion of SCO's claim, there are 17 files missing. They must be big files as well, since they must account for the remaining 84,916 lines."

You mean 840,916? or 849,160? (Too lazy to run bc -lq...)

typo

Posted Sep 11, 2003 7:56 UTC (Thu) by mhatano (subscriber, #4879) [Link]

I believe 109,688 is the number of lines SCO claims stolen, that is related to RCU. And, LWN have just found 24,772. So calculation would go like this: 109,688 - 24,772 = 84,916

Sponsored FUD

Posted Sep 11, 2003 13:02 UTC (Thu) by freeio (guest, #9622) [Link]

When all is said and done, what we will have seen is FUD perpetrated by a dying company, and sponsored by the sale of "licenses" to a few other companies which seem to benefit from the FUD. They might win a battle or two, but they will most certainly lose the war.

So so $CO, M$, and $un - you will most certainly lose. Good Riddance.

Sustainable business models

Posted Sep 11, 2003 13:47 UTC (Thu) by dneto (guest, #4954) [Link]

It seems to me that Cygnus had a sustainable model based on free software. As I know it, they did contract work to port and maintain the GCC toolchain for new or "fringe" (e.g. embedded) processors. Red Hat bought that business, and still gets revenue from it.

I guess SCO doesn't want to work that hard, though... ;-)

dneto

Sustainable business models

Posted Sep 11, 2003 14:01 UTC (Thu) by dwalters (guest, #4207) [Link]

You're right.

In general, it seems to me that you actually have to work harder and keep working to make money from Free Software. I'm not saying that this is a bad thing. It's just an observation.

Sustainable business models

Posted Sep 11, 2003 15:03 UTC (Thu) by jre (guest, #2807) [Link]

To be sure, it is hard to imagine a more dramatic contrast in business models than between Cygnus / Red Hat et al., who have to continue delivering value to the customer in order to get paid, and SCO, whose idea of "monetizing" software appears to be the imposition of a permanent levy on a whole industry, enabling them to clip coupons for the rest of their days on earth.

a real typo (I think :-)

Posted Sep 11, 2003 14:26 UTC (Thu) by pflugstad (subscriber, #224) [Link]

But one thing is clear: SCO claims that the old AT&T licenses give it amazing powers over code that has ever breathed the same air as SYSV Unix.
Shouldn't that be never?

a real typo (I think :-)

Posted Sep 11, 2003 14:32 UTC (Thu) by corbet (editor, #1) [Link]

No, that's what I wanted to write. Any code that has gotten within a certain distance of SYSV is, according to SCO, under its control.

Perhaps the line should read "...powers over any code that has ever breathed the same air..."

a real typo (I think :-)

Posted Sep 11, 2003 15:42 UTC (Thu) by raytd (guest, #4823) [Link]

It seems to me that SCO appears to be claiming power over any code that has ever, as well as some that has never, breathed the same air. Either word feels appropriate.

The state of the SCO case

Posted Sep 11, 2003 15:23 UTC (Thu) by proski (subscriber, #104) [Link]

Next thing SCO will claim is that there are 24,772 lines of stolen code for RCU alone, according to LWN. Don't give them a chance to misquote you.

User licenses

Posted Sep 11, 2003 16:07 UTC (Thu) by dwalters (guest, #4207) [Link]

Jonathan Corbet has done a great job here of reading between the lines of Darl McBride's open letter, and piecing that information together with other bits of evidence to try to build a picture of what's really up SCO's sleeve.

If Mr Corbet's analysis is correct, though, then SCO don't really have any clear grounds to charge license fees from Linux end-users.

Perhaps SCO are proceeding with the licensing plan based on their belief that there are still a few cases of direct copying in the Linux source code, a la ate_malloc(), but we don't know because SCO aren't telling us!

However, and IANAL, but since SCO have completely failed to respond satisfactorily to every reasonable request from the open source community to show us the code (or in ESR and BP's words, to "Disclose the overlaps. Specify file by file and line by line which code you believe to be infringing, and on what grounds."), I fail to see how they can demand licensing fees.

I would think that anybody who receives an invoice from SCO for their "IP License for Linux" would have very good grounds to sue them and DEMAND that SCO reveal EXACTLY which parts of Linux's source code they are being charged license fees for (and crying "trade secrets" won't work for SCO: there are no secrets in Linux, it's all in the open).

The date is interesting

Posted Sep 11, 2003 22:52 UTC (Thu) by addw (guest, #1771) [Link]

    court case in 2005

That is what their paymasters really want - people not installing Linux systems until 2005 - by then the next Windows operating system may be out.

I am never quite sure when SCO talk about Linux, do they just mean the kernel, or are they talking about all the GNU/... utilities, etc, that come in a typical distribution ?

Kernel or operating system

Posted Sep 12, 2003 15:01 UTC (Fri) by ber (subscriber, #2142) [Link]

I am never quite sure when SCO talk about Linux, do they just mean the kernel, or are they talking about all the GNU/... utilities, etc, that come in a typical distribution ?

It seems that the deliberately play on that confusion of the general public. Another reason to avoid talking like a sale representative and be more precise with terminology. You might be interested in FSF's Position regarding SCO's attacks on Free Software.

Copyright © 2003, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds