|
|
Subscribe / Log in / New account

FSF and SFC work with Canonical on an "intellectual property" policy update

The Free Software Foundation (FSF) and Software Freedom Conservancy (SFC) have both put out statements about a change to the Canonical, Ltd. "intellectual property" policy that was negotiated over the last two years (FSF statement and SFC statement). Effectively, Canonical has added a "trump clause" that clarifies that the licenses of the individual packages override the Canonical policy when there is a conflict. Though, as SFC points out: "While a trump clause is a reasonable way to comply with the GPL in a secondary licensing document, the solution is far from ideal. Redistributors of Ubuntu have little choice but to become expert analysts of Canonical, Ltd.'s policy. They must identify on their own every place where the policy contradicts the GPL. If a dispute arises on a subtle issue, Canonical, Ltd. could take legal action, arguing that the redistributor's interpretation of GPL was incorrect. Even if the redistributor was correct that the GPL trumped some specific clause in Canonical, Ltd.'s policy, it may be costly to adjudicate the issue." While backing the change made, both FSF and SFC recommend further changes to make the situation even more clear.

to post comments

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 15, 2015 16:51 UTC (Wed) by Jonimus (subscriber, #89694) [Link] (33 responses)

Basically they did the bare minimum to make their policy comply and then said screw you to everyone involved.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 15, 2015 17:05 UTC (Wed) by ewan (guest, #5533) [Link] (31 responses)

Did anyone expect anything better? Canonical have repeatedly made it clear that they don't see themselves as participants in a community, they see themselves as something separate, if not to say superior, to it.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 15, 2015 20:18 UTC (Wed) by jospoortvliet (guest, #33164) [Link] (30 responses)

In other words, Jonathan Riddell was right in his criticism and at least partially in his assumptions.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 15, 2015 21:01 UTC (Wed) by stumbles (guest, #8796) [Link]

Seems like it but it's just my opinion so waddoeyeknow.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 16, 2015 10:33 UTC (Thu) by jriddell (subscriber, #3916) [Link] (28 responses)

It turned out to be worse than my criticisms, they were violating the GPL. That means they've now lost the right to distribute GPL 2 software unless they ask for forgiveness.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 16, 2015 18:10 UTC (Thu) by rahvin (guest, #16953) [Link] (27 responses)

Though I might agree with you, they never tried to enforce their anti-GPL provisions (legally that is) from what I can see. You'd have a hard time proving they violated the license and I doubt a court would agree.

Though it does provide further evidence that they don't want to be a member of the community and anything they do needs to be watched like a hawk for further violations. I think it's ample evidence that projects like kubuntu should re-base on Debian.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 16, 2015 18:55 UTC (Thu) by jspaleta (subscriber, #50639) [Link] (26 responses)

Let's see if we can get someone at Valve to go on record publicly with why they rebased on Debian after prototyping on Ubuntu. Was the IP policy a factor?

Canonical doesn't have to have actively threatened in the past for this to be a real problem for companies moving forward. A lack of past enforcement does not defend anyone in the future when it comes to copyright issues. Canonical can pick and choose who to go after at any point.

The ambiguity of the IP policy is itself a long term liability for anyone making use of the Ubuntu binaries to spin up a derivative. The fact that the IP policy _allows_ Canonical to do a lot of nefarious things in a grey area of common uses of the Ubuntu binaries is the entire point. The fact that Canonical chooses to refrain from doing those things right now... just muddles the waters a bit and gives people false sense of security. Trust but verify.

The world ending nuclear scenario here is Canonical gets bought out and the new management team takes a look at the IP Policy and no longer feels the same ethical or moral restrain with regard to making full use of its IP policy compliance options. This is a realistic future scenario and past restraint on Canonical's part now is not codified in a way that could be used as an estoppel defense in court. The Ubuntu repository licensing policy for main and restricted might provide estoppel but really who in the hell wants to test that? Any company with any competence on IP issues will look at that policy and just avoid it entirely. Cough... Valve... cough.

The good faith uses that do not require an explicit license need to be codified. The uses that require a license need to be codified. If you are thinking about using any non-GPL Ubuntu project binaries in a way that is not clearly codified in the IP policy, then you should contact Canonical legal about your intended usage, and when they fail to give you a determination as to whether or not you need a license in a timely manner, and they will, you then go choose another option to rebase from. How much of the plumbing under say KDE is actually non-(L)GPL...and is impacted by the IP policy as it currently stands? Xorg is just one piece. What else would need to be recompiled in a derived work using Ubuntu project binary KDE packages?

-jef

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 16, 2015 22:56 UTC (Thu) by rahvin (guest, #16953) [Link] (25 responses)

It doesn't really matter what canonical puts in their terms if they don't have the rights to do it. The courts would handle it the same as illegal contract provisions and they would be struck from the agreement or the agreement terminated completely. As an aside, I'd argue that putting something on a freely downloadable FTP site with a terms and conditions on some other webpage saying you agree to the terms by downloading doesn't meet the requirements of informed consent.

So even if Canonical puts terms in that violate the GPL if they enforce them, but then don't enforce them they aren't violating the GPL IMO (others probably disagree). But the second that company that purchases them tries to enforce them they have 100% violated the GPL and lost all rights for the software they violated it on.

IMO there is every argument to be made that because Canonical doesn't control access to binaries and allows free redistribution that they've forgone the very control they claim to keep. As others have noted Redhat makes similar claims and does limit download of the binaries to those with an actual formal agreement. Personally I'm not afraid of these Canonical terms, there is nothing in them that could give Canonical or some future owner the right to come after me. They could try to sue me, and it might cost me a lot of money in legal fees but they would lose in the end. And situations like that often end up with the loser paying the legal fees because Canonical didn't have a case and should have known it. The new FSF negotiated catch all term just gives you an easy summary judgement motion to end such a lawsuit early, but even without it you'd probably win either way.

This is no way should be taken as me saying what I think they are doing is right. I think it's stupid stupid policy and it's only going to hurt Canonical. I can see others being worried about being sued and the financial burden of legal protection being too great and deciding to rebase off a distribution without such language.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 17, 2015 3:08 UTC (Fri) by jspaleta (subscriber, #50639) [Link] (24 responses)

I making this argument primarily for the benefit of any Canonical employees still willing to try to fix the Canonical's corporate culture who make be lurking.

The reality is serious potential customers are going to shy away from relying on Ubuntu for derivative work...if they IP terms and the fees for use of the binaries are not crystal clear. You might not be scared of a legal fight, but the reality is serious startups are going to go look at that IP policy and back away from Ubuntu and Canonical will lose business. Unsubstantiated rumor is this has already happened with Valve.

I'm actually trying to help them get their crap together. The ambiguity of the IP policy is not in their best interest. Regardless of legal validity..its the ambiguity of the exactly what the licensing terms are which is going to kill the business model..wahtever the business model actual is here.

-jef

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 17, 2015 3:23 UTC (Fri) by dlang (guest, #313) [Link] (23 responses)

and you think anyone could make a derivitive work of RedHat Enterprise without running into IP issues with RedHat?

please stop spreading FUD

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 17, 2015 3:57 UTC (Fri) by rahulsundaram (subscriber, #21946) [Link] (22 responses)

What "IP" issues? CentOS (now even part of Red Hat), Scientific Linux etc are direct derivatives and they are just fine.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 17, 2015 4:13 UTC (Fri) by jspaleta (subscriber, #50639) [Link] (21 responses)

That's a bit off the mark. You can't look at the RHEL ecosystem for guidance on this.

None of the RHEL derivatives reuse RHEL binaries built by RH.. they all rebuild from source.. as far as I am aware. I'm not even aware of a CentOS derivative that reuses CentOS built binaries (now built by RH as well technically).

The Canonical situation is different in that they are claiming that you cannot just take things like X.org binaries provided by Ubuntu and use those binaries in a derivative without needing some sort of license form Canonical. A mixture of MIT licensed Xorg binaries from Ubuntu repositories and binaries from elsewhere can't exist without canonical's assent as they claim to own the copyright to the binaries for Xorg packages. Xorg is just an example, any BSD or MIT licensed binary Canonical builds and distributes is subject to these copyright restrictions. (L)GPL'd packages are an entirely different matter, now corrected by the new IP policy clause. Details details details.

The RHEL ecoysystem doesn't have this particular issue because RHEL binaries are basically not publicly available and the terms of the subscriber agreement for RHEL make it very unlikely that any subscriber would do this sort of thing..or else lose access to future updates. I'm not aware of RH claiming its not allowed however, you'd just have your subscription turned off and you'd lose access to further binaries. This definitely is not something I've ever seen claimed by Fedora and there were derived things out there that mixed binaries like this in the Fedorascape at some point.

And all of this is separate from any trademark policy, which are not currently in dispute as far as I am aware.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 17, 2015 4:48 UTC (Fri) by dlang (guest, #313) [Link] (20 responses)

> ...RHEL binaries are basically not publicly available and the terms of the subscriber agreement for RHEL make it very unlikely that any subscriber would do this sort of thing..or else lose access to future updates.

and why are people not screaming that this is "adding additional restrictions" to the GPL?

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 17, 2015 4:59 UTC (Fri) by jspaleta (subscriber, #50639) [Link] (3 responses)

Well.. people have tried to claim that...and its been looked at...and well..RHEL's policy doesn't violate the GPL.
http://lwn.net/Articles/431854/
http://ebb.org/bkuhn/blog/2011/03/11/linux-red-hat-gpl.html
http://ebb.org/bkuhn/blog/2011/03/05/open-core-slur.html

And to be clear Canonical's policy doesn't violate the GPL any more either. It did before the FSF and SFC got involved.
Now the problems with Canonical's IP policy are about everything else but the GPL code. It's still a lot of code. I can't wait to see what Canonical legal says about the perhaps tens of Ubuntu remixed docker images sort of floating around out there that might be out of compliance.

-jef

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 17, 2015 5:24 UTC (Fri) by mjblenner (subscriber, #53463) [Link] (2 responses)

> It did before the FSF and SFC got involved.

Citation needed. The old policy had a trump clause too, just not as prominent.

From: http://www.ubuntu.com/legal/terms-and-policies/intellectu...

"This does not affect your rights under any open source licence applicable to any of the components of Ubuntu."

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 17, 2015 5:31 UTC (Fri) by jspaleta (subscriber, #50639) [Link] (1 responses)

You are confusing Canonical's copyright claims with their trademark claims.
You just quoted a section of their IP policy specific to their trademarks. The trademarks are not in dispute.
If you can't wrap your head around the different between the copyright claims and the trademark claims, I'm not sure how to help you.

Please read:
https://sfconservancy.org/news/2015/jul/15/ubuntu-ip-policy/

In particular the section titled "Why The Original Policy Violated"

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 17, 2015 5:45 UTC (Fri) by mjblenner (subscriber, #53463) [Link]

> You are confusing Canonical's copyright claims with their trademark claims.

Am I? The bit I quoted wasn't in the trademark section.

The SFC talked about recompiling binaries as being one example of GPL violation.

Here's the old license with a bit more context:

"Otherwise you must remove and replace the Trademarks and will need to recompile the source code to create your own binaries. This does not affect your rights under any open source licence applicable to any of the components of Ubuntu"

Doesn't the second sentence trump the "recompile" when the open source licence is GPL? (I'll agree that it's badly worded and has copyright and trademarks both in there)

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 17, 2015 5:45 UTC (Fri) by mjblenner (subscriber, #53463) [Link] (15 responses)

> and why are people not screaming that this is "adding additional restrictions" to the GPL?

From the RHEL license:

"At the same time, the combined body of work that constitutes Red Hat Enterprise Linux is a collective work which has been organized by Red Hat, and Red Hat holds the copyright in that collective work. Red Hat then permits others to copy, modify and redistribute the collective work. To grant this permission Red Hat usually uses the GNU General Public License (“GPL”) version 2 and Red Hat’s own End User License Agreement."

The end user license agreement looks a lot like Canonical's IP license (trademarks and such, strip all branding). So is that "additional restrictions on the GPL"?

Also, does that include the source of RHEL?

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 17, 2015 16:34 UTC (Fri) by mjg59 (subscriber, #23239) [Link] (14 responses)

The RHEL license permits you to redistribute binaries, but trademark law may (under various circumstances) restrict you. That's not an additional restriction imposed by Red Hat, so it's not an additional GPL restriction. More problematic is the fact that distributing the binaries will probably result in Red Hat refusing to give you any more of those binaries,but since Red Hat aren't under a legal obligation to give those binaries to you anyway, it's still not an additional restriction.

The net effect of Red Hat's license certainly has some similarities to Canonical's policy, but the details are significantly different.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 17, 2015 17:33 UTC (Fri) by nybble41 (subscriber, #55106) [Link] (13 responses)

> The RHEL license permits you to redistribute binaries, but trademark law may (under various circumstances) restrict you. That's not an additional restriction imposed by Red Hat, so it's not an additional GPL restriction.

Trademark law isn't restricting you; Red Hat is restricting you from using "their" trademark, as permitted by trademark law. That should count as an additional restriction imposed by Red Hat, no different than if they tried to restrict redistribution on the basis that it would infringe on their copyrights or patents.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 17, 2015 17:43 UTC (Fri) by mjg59 (subscriber, #23239) [Link] (12 responses)

The FSF's position on this is pretty clear:

"For example, some licenses say that they don't give you permission to use certain trademarks. That's not really an additional restriction: if that clause wasn't there, you still wouldn't have permission to use the trademark. We always said those licenses were compatible with GPLv2, too."

(from http://www.gnu.org/licenses/quick-guide-gplv3.en.html)

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 17, 2015 18:35 UTC (Fri) by dlang (guest, #313) [Link] (9 responses)

nobody is saying that there should be free use of trademarks. That's not the question here.

But "don't you dare distribute the binaries or we'll cut off the support contract you paid for" is not "don't mislead people into thinking that you are us" which is what trademark is all about.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 17, 2015 18:44 UTC (Fri) by mjg59 (subscriber, #23239) [Link] (8 responses)

> nobody is saying that there should be free use of trademarks. That's not the question here.

Right. The question is whether Red Hat are imposing an additional restriction on the distribution of GPLed material, and the answer is that they aren't.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 17, 2015 20:00 UTC (Fri) by dlang (guest, #313) [Link] (7 responses)

the problem is that this looks like RedHat and Canonical are being treated differently.

they are both saying "you can't distribute our binaries to anyone unless <non-GPL terms>"

but Redhat is getting a pass while people are dragging out all sorts of things that Canonical could theoretically do, but hasn't done, and pointing out how evil it is that they could do these things.

Why is RedHat putting things in it's contracts that prevent people redistributing what they get (as long as what they are doing does not cause consumer confusion which is what Trademark law addresses) acceptable, but other distros doing what looks like the same thing 'utter evil'

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 17, 2015 20:07 UTC (Fri) by mjg59 (subscriber, #23239) [Link] (6 responses)

> the problem is that this looks like RedHat and Canonical are being treated differently.

They're being treated differently because they're doing different things.

> they are both saying "you can't distribute our binaries to anyone unless <non-GPL terms>"

No. Red Hat does not impose any additional restrictions on your ability to distribute binaries. If you have the binaries and if distributing the binaries would not infringe upon Red Hat's trademarks, you can give them to anybody else. Canonical's policy explicitly prevented you from distributing those binaries.

> people are dragging out all sorts of things that Canonical could theoretically do, but hasn't done

They wrote a policy that states that you're not permitted to redistribute binaries. There's at least one case of them using this policy to force an Ubuntu derivative to pay for a license from them. What's theoretical about this situation?

> Why is RedHat putting things in it's contracts that prevent people redistributing what they get

They're not?

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 17, 2015 20:39 UTC (Fri) by dlang (guest, #313) [Link] (5 responses)

> No. Red Hat does not impose any additional restrictions on your ability to distribute binaries.

"if you distribute binaries or patches you loose access to updates that you have paid a support contract for" isn't a restriction on your ability to distribute binaries???

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 17, 2015 20:56 UTC (Fri) by Cyberax (✭ supporter ✭, #52523) [Link]

No, it's not. You are allowed to redistribute binaries and there's no monetary requirements attached to it. However, RedHat is also not obligated to continue business relationship with you if you do this.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 17, 2015 20:56 UTC (Fri) by mjg59 (subscriber, #23239) [Link] (2 responses)

> "if you distribute binaries or patches you loose access to updates that you have paid a support contract for" isn't a restriction on your ability to distribute binaries???

Correct. It's a repugnant part of Red Hat's strategy, but it does nothing to stop you from distributing the binaries. The GPL can't compel a company to continue doing business with you if they choose not to.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 18, 2015 0:33 UTC (Sat) by drag (guest, #31333) [Link] (1 responses)

> The GPL can't compel a company to continue doing business with you if they choose not to.

Another possible way to look at this is that the GPL is a copyright license and as such it's limited in scope by copyright law itself.

It doesn't deal with patents or trademarks. Also it is not a contract establishing indentured servitude between you and the person that handed you the software.

Also another thing to keep in mind that is that Canonical is not a USA corporation. Typically when people talk about GPL it's in the context of USA copyright law, because that is still the biggest market for this stuff. The ability to license distribution of binaries may be significantly different in a UK or South African's lawyer's eyes then a American. This copyright stuff is completely arbitrary and doesn't really make a whole lot of sense, fundamentally. I find it dismaying that people are so ready to condemn companies like Canonical and act like they are the evil guys here.

Running into conflicts with subtle interpretations of a country's laws doesn't make a business illegal or immoral or turn the violators into assholes that need to be publicly humiliated and condemned. It seems that most people really involved in trying to resolve these issues and elucidate the public seem to be trying to be respectful for the most part, which is excellent. It's the peanut gallery that, I feel, needs to step back and take a breather. Canonical has problems, but so does everybody else on the planet.

I say the best thing to do is just sit back and let the copyright holders themselves deal with things in a constructive manner. Trying to 'put pressure' on people and criticism almost never works and just makes people go on the defensive and only consider the justifications for their actions rather then engage in improvements or try to deal constructively with the 'community'.

Also I am going to try to remember this stuff when the BSD folks criticize the GPL and point out how it can create a legal morass for the people that try to use it in their products. It's not a easy thing to deal with, even though the view from a thousand feet above makes everything seems so obvious.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 18, 2015 1:20 UTC (Sat) by mjg59 (subscriber, #23239) [Link]

> I say the best thing to do is just sit back and let the copyright holders themselves deal with things in a constructive manner. Trying to 'put pressure' on people and criticism almost never works and just makes people go on the defensive and only consider the justifications for their actions rather then engage in improvements or try to deal constructively with the 'community'.

In this case the attempt to deal with it in a constructive manner has taken years and resulted in the bare minimum fix required to ensure that Canonical aren't breaching copyright law. The policy overall is still a hostile act on their part, and so I think it's reasonable for the wider community to point out the ways that it makes their lives difficult.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 17, 2015 20:57 UTC (Fri) by jspaleta (subscriber, #50639) [Link]

Nope. It is not. I think kuhn does an excellent analysis of the situation here in his blog.

It really doesn't matter which entity turns off the subscription.. red hat or the customer.. nor does it matter for what reason. At the end of the day, the customer can do whatever they want with the binaries they have in hand. They just won't be Red Hat customers any longer and will not be getting updates. If a customer chooses to stop paying Red Hat, they can redistribute the binaries they have. Red Hat cannot compelling them to become paying customers again. Nor can Red Hat compel them via legal means to stop distributing the binaries.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 18, 2015 3:11 UTC (Sat) by nybble41 (subscriber, #55106) [Link] (1 responses)

> The FSF's position on this is pretty clear:

I agree, their position is clear. I also think it's contrary to the plain meaning of the text of the GPLv2:

> 6. Each time you redistribute the Program (or any work based on the Program), the recipient automatically receives a license from the original licensor to copy, distribute or modify the Program subject to these terms and conditions. You may not impose any further restrictions on the recipients' exercise of the rights granted herein. You are not responsible for enforcing compliance by third parties to this License.

I fail to see any way in which a restriction on redistribution (with or without modification) on the basis of a trademark claim could avoid constituting the imposition of a further restriction "on the recipients' exercise of the rights granted herein."

Section 7 says that you can't distribute a GPLv2 program if a third-party patent license would be required for downstream recipients to exercise their rights (such as the creation and distribution of derivative works) under the GPL. It doesn't say that it's acceptable to require recipients to remove or replace portions of the code covered by the patent. The only reason the contributor's own patents are not mentioned is that permission to use them in connection with the program is implied by the existing terms. Why would the same logic not apply in the case of trademarks? A requirement that recipients strip out or trademarks already in the codebase prior to distributing modifications is not substantially different from a requirement to strip out a patented algorithm.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 19, 2015 9:55 UTC (Sun) by dlang (guest, #313) [Link]

actually a requirement to strip out trademarks in no way affects the functionality of a program (unlike removing algorithms)

But removing trademarks is also only a requirement if not doing so could create confusion in the recipient as to who is backing the software or who they got it from. If there's no chance of such confusion, then there's no trademark violation (and therefor no license for the trademark needed)

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 15, 2015 17:10 UTC (Wed) by coriordan (guest, #7544) [Link]

For example, if they intend their GPL'd software to be included in their definition of "Canonical IP" then this part from the start of the policy is incorrect:


Your use of Canonical IP is subject to:

  • Your acceptance of this IPRights Policy;
  • Your acknowledgement that Canonical IP is the exclusive property of Canonical and can only be used with Canonical’s permission (which can be revoked at any time); and
  • You taking all reasonable steps to ensure that Canonical IP is used in a manner that does not affect either the validity of such Canonical IP or Canonical’s ownership of Canonical IP in any way; and that you will transfer any goodwill you derive from them to Canonical, if requested.

If they publish something under the GPL then you have the right to use it for any purpose and your rights are not subject to accepting an "IPRights Policy" from Canonical or from anyone else. That's what's great about the GPL. So I don't know what to make of this part: "Your continued use of Canonical IP implies your acceptance and acknowledgement of this IPRights Policy."

One way a judge could resolve this contradiction would be to suppose that Canonical doesn't intend GPL and other copyleft software to be included in their definition of "Canonical IP", which means their attempt to claim rights they don't have would actually backfire.

Anyone else got different readings of it?

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 15, 2015 17:41 UTC (Wed) by jspaleta (subscriber, #50639) [Link] (16 responses)

So am I reading this right as to say that redistributors..who merely... mirror the binary packages from the Ubuntu repositories... could be on the hook for some sort of Canonical IP license if they were pressed? Hmmm. That's not good. I should talk to the local mirror admin here about that.

-jef

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 15, 2015 18:09 UTC (Wed) by coriordan (guest, #7544) [Link] (15 responses)

I was going to reply to say that one line (which is bizarre for other reasons) does seem to allow mirroring:

"You can redistribute Ubuntu, but only where there has been no modification to it."

...but I haven't read the rest of the doc to see if other sentences place limits on this permission, and this permission to redistribute doesn't seem to exempt people from the bit at the start which says you acknowledge and accept the IPRights Policy as a whole, or the bit that says that "use of Canonical IP" is subject to "You taking all reasonable steps to ensure that Canonical IP is used in a manner that does not affect either the validity of such Canonical IP or Canonical’s ownership of Canonical IP in any way; and that you will transfer any goodwill you derive from them to Canonical, if requested."

So go figure.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 15, 2015 18:58 UTC (Wed) by jspaleta (subscriber, #50639) [Link] (14 responses)

go figure indeed. It's probably okay if they are strictly mirroring. If they have a U derived in-house built install image for students or something on offer as well... maybe not so much. But I would not characterize the wording of the SFC and FSF statements as giving the all clear signal.

The real "fun" here how this policy interacts with concepts like docker images or other container appliances. What counts as a modification really? Unpacking a package and installing it into a container?

But I will say I am very well pleased...satiated really... by the amount on internal policy mismatch between Canonical's IP rules and the Ubuntu project itself.

Compare and contrast Canonical's IP rules and Ubuntu's archive inclusion licensing policy concerning restrictions on redistrubtion.
http://www.ubuntu.com/about/about-ubuntu/licensing

If any other "open source" vendor used Canonical's IP policy..verbatim.. that vendor's software would not be allowed into Ubuntu in main. That is the biggest problem with the IP policy really.. it encodes Canonical as "exceptional." Now some people will of course claim that being exceptional is a great thing to be...those people are probably the exception. The Ubuntu repository licensing policy seems to have a lot to say about the sort of exceptionalism if practised by anyone not Canonical. It's really awesomely conflicted and hilarious really. I am amused.

I don't know how they'll sort this out...there is a deep divide here between the reality of the operational corporate entity and the mythology of big tent project that people want to believe Ubuntu is meant to be.

But in the meantime, the rest of us should problably modify any source code coming out of Canonical/Ubuntu such that we strip the word ubuntu out of the code entirely if we are shipping it. Including perhaps email addresses in the changelogs or docs..just to help prevent Canonical wasting time making silly trademark claims that will not hold up in court.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 15, 2015 21:01 UTC (Wed) by mhall119 (guest, #57124) [Link] (13 responses)

> If any other "open source" vendor used Canonical's IP policy..verbatim.. that vendor's software would not be allowed into Ubuntu in main.

Ubuntu doesn't copy upstream binaries into the archives, we build everything from source, so it wouldn't matter all if another vendor used a similar policy to cover the binaries that they build.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 15, 2015 21:03 UTC (Wed) by jspaleta (subscriber, #50639) [Link] (1 responses)

The future is snappy!

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 15, 2015 21:13 UTC (Wed) by mhall119 (guest, #57124) [Link]

The rules for the Snappy store are different from the rules for the archives. The store is there for independent 3rd party developers, it allows open and closed source applications to be uploaded by those developers.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 15, 2015 21:29 UTC (Wed) by raven667 (subscriber, #5198) [Link] (7 responses)

Which is ultimately similar to Redhat's policy but the communication and details of handling this seem to be more difficult for Canonical.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 15, 2015 22:01 UTC (Wed) by jspaleta (subscriber, #50639) [Link] (6 responses)

I don't see how this is the same as RH at all in the details.

RH is upfront.. you pay as a subscriber to get binaries and you agree to certain restrictions are part of that cash-changing-hands agreement. You don't like the agreement, then you go elsewhere before you've integrated their product into yours. If you do agree and you break the subscriber agreement and you lose access to updated binaries and that's the end of it. Very little confusion, and the pain is right upfront when you have to make the decision to subscribe or not.

Moreover RH is not relying on the goodwill of public mirrors..they are distributing those RHEL binaries from RH controlled infrastructure. Its very difficult to get access to RHEL binaries without being asked to agree to the subscriber agreement as part of that paying customer transaction. Public mirrors of the binaries are pretty rare, and RH doesn't publicize those mirrors in a way that encourages people to pick up and use individual binaries in derived works.

Canonical is not upfront. They make it really easy for you to get access to Ubuntu project built binaries without being aware of what the restrictions are on use of those binaries. They even have encouraged public mirroring of the binaries which makes it every easier for people to avoid having to affirmatively agree to the IP policy restrictions. They rely on those public mirrors as part of offsetting their infrastructure cost for distribution. So when certain employees claim that Canonical is entitled to some sort of licensing royalty because of the resources they burned to produce those binaries you are reusing.. just remember that distributed mirror bandwidth canonical is taking advantage of and not paying for and negotiate that licensing rate down accordingly.

And then if you break the Canonical IP policy, they twist your arm a little to pick up a license after the fact. They squeeze you for money _after_ you have integrated their product into your production.. for the continued use of the binaries you have. They are banking on the fact that its easier to just pay them off with protection money..then to move over to another set of tooling. This relies on the fact that people do a terrible job of checking to see if their intended use of Ubuntu breaks Canonical's IP terms before they start using it. And this disinentivizes Canonical from drawing a very clear bright line concerning what triggers use. It's slimy, and when I say its a protection racket scheme.. i mean it. They might not understand it to be what they are doing...never ascribe to malice and all that...but its what they are doing. If potential licensing customers don't know the terms up front when they start playing with your gratis limited-use demo version..then its a racketeering scheme in the end.

No not the same at all.

But really this is a transitional period for Canonical. As soon as they move over to snappy based images and get rid of the debian repo stuff, and silo all of the Canonical controlled binary distribution behind their new store concept using their packaging concept, the IP policy stuff will make much more sense. It'll just be so much harder to build a derived work without Canonical's direct involvement in blessing the snaps that non licensed derived works will just stop being a thing that people work on. The future is snappy!

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 15, 2015 22:35 UTC (Wed) by raven667 (subscriber, #5198) [Link]

This is exactly what I meant when I said that Canonical has difficulty with the details and the communication, they didn't pay attention to the details and were unclear in their communication so we have a schizophrenic public/private hybrid Ubuntu instead of the clean separation between something like RHEL/CentOS/Fedora, each with their own trademarks. The idea that the license for the binaries would be more restrictive than the source is similar to how Redhat handles things, and it seems to be working well for them, I'm not sure why Canonical is having so much difficulty when they were started after Redhat adopted its current business model in the early 2000s.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 15, 2015 23:13 UTC (Wed) by mhall119 (guest, #57124) [Link] (4 responses)

> And then if you break the Canonical IP policy, they twist your arm a little to pick up a license after the fact. They squeeze you for money _after_ you have integrated their product into your production.

Do you have evidence of arm twisting? I know the details of only two instances where an additional IP license was required, one cost $1 USD and the other cost $0 USD.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 15, 2015 23:17 UTC (Wed) by jspaleta (subscriber, #50639) [Link]

Evidence: $1

Just publish a public licensing fee schedule. If everybody knew it cost $1 to take a license... upfront... then that helps. If its some sort of negotiated case by case scheme based on your company's revenue... tsk tsk tsk.

-jef

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 16, 2015 15:45 UTC (Thu) by sebas (guest, #51660) [Link] (2 responses)

Example #2:

Canonical required Clem, the main developer of Linux Mint to license their binaries. This was not at all clear to Clem when he started the Linux Mint project. Worse, there's an NDA in place that disallows Clem to share the licensing terms.

Source (one of many): http://distrowatch.com/weekly.php?issue=20131209#qa

Meanwhile, Canonical refuses (or, let's perhaps just say "takes a very, very long time") to answer inquiries about costs and conditions of licensing "their" binaries. Sad fact, even copyright holders of the source code they are shipping as binaries (and claimed IP rights for) do not get answers to those rather vital questions around exercising our rights of Free software.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 17, 2015 3:25 UTC (Fri) by mhall119 (guest, #57124) [Link] (1 responses)

What makes you think there is an NDA? Nothing in the linked article or any other I've read mentions one.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 19, 2015 12:35 UTC (Sun) by sebas (guest, #51660) [Link]

Clem is not allowed to disclose the terms of his deal with Canonical. If you can deny that with a straight face, I'd be surprised, but please do so in a way that clears Clem for legal steps taken by Canonical afterwards in case he breaks such an NDA. Just in case there is one... ;)

Also, if it weren't such a big deal, Canonical would actually answer inquiries about licensing terms to those who ask, including, but not exclusively Jonathan Riddell.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 16, 2015 7:54 UTC (Thu) by Seegras (guest, #20463) [Link] (1 responses)

The future is reproducible builds, and that's the point where the packages that I compile are indistinguishable from yours. Which precludes anyone to have any "special" rights onto these binaries, apart from the license the software is under.

This "you must build from source" requirement is completely bogus.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 16, 2015 20:08 UTC (Thu) by rahvin (guest, #16953) [Link]

The point of reproducible builds is security verification that the compiled source doesn't differ from the supplied source. I don't think you can argue that extends to there being no control of the binary. The GPL is pretty clear you can charge money for the binaries, but you have to provide the source and can't restrict redistribution of that source. There is no language that I'm aware of that would require redistribution of the binary.

My understanding of the original issue is that the Canonical terms appeared to be restricting rights to the source which is a GPL violation.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 16, 2015 21:55 UTC (Thu) by stefanor (subscriber, #32895) [Link]

> > If any other "open source" vendor used Canonical's IP policy..verbatim.. that vendor's software would not be allowed into Ubuntu in main.
> Ubuntu doesn't copy upstream binaries into the archives, we build everything from source, so it wouldn't matter all if another vendor used a similar policy to cover the binaries that they build.

This policy doesn't only apply to binaries, it also applies to any source code containing Canonical-owned trademarks, and anything implementing Canonical's protected "trade dress and look and feel".

Derivatives of such Canonical-originated packages would appear to be restricted to non-commercial use, only.

This means, for example, that Unity couldn't be uploaded to Debian, with the look and feel of Ubuntu. Which, practically means it'd have to be redesigned to the point that it's no longer Unity.

More on use of trump clauses and their danger.

Posted Jul 15, 2015 23:10 UTC (Wed) by bkuhn (subscriber, #58642) [Link]

For those interested, I posted a blog post about my personal thoughts on the matter. TL;DR: these trump clauses are used a lot more than people realize, and it makes the case for why we need copyleft, IMO.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 16, 2015 2:46 UTC (Thu) by ccchips (subscriber, #3222) [Link] (7 responses)

Question for any participants from Canonical or Ubuntu participants:

Is all this stuff aimed at Linux Mint? I'm afraid I much prefer it over Ubuntu and I think if Canonical tries to squash it, I'm going to go back to straight Debian.

I tried main-line Ubuntu and didn't like it.

I've had my fill of Ubuntu Studio.

If they're going to start a hard line, I, for one, am a lost advocate/customer.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 16, 2015 2:50 UTC (Thu) by ccchips (subscriber, #3222) [Link]

Oh, by the way....I'm doing these comments on a WINDOWS 8 2-in-one, because...ahem....

...well....

Ubuntu?

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 16, 2015 3:27 UTC (Thu) by mhall119 (guest, #57124) [Link] (5 responses)

No, Mint was offered a very broad license grant basically for free so that they could keep shipping Ubuntu packages to Mint users. We absolutely do not want to squash them.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 16, 2015 6:59 UTC (Thu) by micka (subscriber, #38720) [Link] (2 responses)

Actually, the simple fact that someone thought they needed such a grant is disturbing by itself.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 17, 2015 13:12 UTC (Fri) by jg (guest, #17537) [Link] (1 responses)

Trademark law *requires* you to take steps to protect your trademark.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 19, 2015 15:58 UTC (Sun) by jospoortvliet (guest, #33164) [Link]

Yes, but this conversation isn't about trademarks but copyright.

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 16, 2015 10:32 UTC (Thu) by thumperward (guest, #34368) [Link] (1 responses)

Was the license grant graciously offered to them "basically for free" as permissive as the one that the licenses on the individual software components already granted them?

FSF and SFC work with Canonical on an "intellectual property" policy update

Posted Jul 16, 2015 13:30 UTC (Thu) by mhall119 (guest, #57124) [Link]

I didn't see their actual license, but I did request one for similar reasons for my own distro which used Ubuntu binaries in much the same way as Mint, and it placed no restrictions on me other than a promise to protect the Ubuntu trademark in what I was doing.

Diff for the latest Canonical "Intellectual property rights policy"

Posted Jul 16, 2015 15:03 UTC (Thu) by nealmcb (guest, #20740) [Link]

I wish Canonical had provided a diff for their new text, or said more about this themselves.

I used https://www.changedetection.com/comparepages.html to compare the old policy at http://www.ubuntu.com/legal/terms-and-policies/intellectu...
with the new one at http://www.ubuntu.com/legal/terms-and-policies/intellectu...
and it looks like the only change to the actual text is the addition of a new section 2: "Relationship to other licenses" with that trump clause.


Copyright © 2015, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds