LWN.net Weekly Edition for June 6, 2002
Fun with software patents
Much of this week's LWN front page has to do with software patents, and how to respond to them. Doubtless some people are tired of the topic, but it remains important. The shape of our free software systems in the future will, unfortunately, be much affected by software patents. It is important that we figure out how to deal with them.Red Hat and software patents
Software companies worry about software patents; an infringement suit can, after all, ruin your whole day. Red Hat has decided that the best way to deal with the problem of software patents is to get into the game. So, the company has applied for (at least) two patents:- Embedded Protocol Objects, mixture of static and dynamic responses to HTTP requests, as found in TUX.
- Method and apparatus for atomic file lookup, a lookup optimization in the Linux dentry cache.
Both of these techniques show Ingo Molnar as the inventor. And where might one find the patented technology?
The
embodiments of the present invention described are implemented in a
computing platform based on the computer operating system commonly known as
'Linux' that is available as open source directly over the Internet. Linux
is also available through various vendors who provide service and support
for the Linux operating system. Among these vendors are Red Hat, Inc., of
Research Triangle Park, N.C., the assignee of the present
invention.
(This news was originally reported (in Italian) on FreeGo).
After letting people worry over the holiday weekend, Red Hat issued a statement of position on software patents. According to that statement, Red Hat's intent is defensive:
Red Hat has consistently taken the position that software patents
generally impede innovation in software development and that
software patents are inconsistent with open source/free
software.... At the same time, we are forced to live in the world
as it is, and that world currently permits software patents. A
relatively small number of very large companies have amassed large
numbers of software patents. We believe such massive software
patent portfolios are ripe for misuse because of the questionable
nature of many software patents generally and because of the high
cost of patent litigation. One defense against such misuse is to
develop a corresponding portfolio of software patents for defensive
purposes. Many software companies, both open source and
proprietary, pursue this strategy.
Red Hat, too, has decided to pursue that strategy; it has joined the software patent arms race by arming itself.
What do these patents mean for free software? According to Red Hat's position, not much; the statement includes a promise to not enforce any patent claims against software using an "approved" open source license. So the free software community can relax; Red Hat is simply trying to protect itself from patent suits and will not be exploiting the dark side of software patents.
Not so fast. The situation, unfortunately, is not quite that simple. There are a couple of problems with Red Hat's position that should be kept in mind.
The first of these problems is that a promise on Red Hat's web site only means so much. It is not an enforceable contract that anybody can count on; Red Hat can change its position at any time. A court may take the published promise into account in a future case, but that promise may not keep such a case from happening in the first place. Red Hat, under its current management, seems unlikely to change its approach to patents - the posted promise is undoubtedly sincere. But corporate management and ownership can change quickly - and, with them, posted patent policies.
More disturbing in the short term, however, is Red Hat's list of "approved" licenses. It includes the GPL, the IBM Public License, the Common Public License, the Q Public License, and "any open source license granted by Red Hat." A whole class of licenses, including the LGPL and, crucially, the BSD license, has been excluded from Red Hat's patent promise.
In other words, the various versions of BSD Unix are not welcome to use Red Hat's patented technology. In fact, they can be sued for infringement if they do use that technology. The license wars, it seems, are still being waged, and Red Hat has just launched a new offensive. This is a move which will encourage division in the free software community, to say the least.
The cynical among us could even see this policy as a strike by Red Hat against a whole class of competing free operating systems. That is almost certainly not the case: Red Hat is just trying to ensure that its patent weapons can actually be used. As the company told us:
We elected to specifically exclude licenses that don't expressly
prohibit open source code from being incorporated into proprietary
code. Absent that stance, the patents would be of little benefit.
It's not worth it. Red Hat ships a great deal of software under licenses which, it seems, are now too free: consider the X window system or OpenSSH, for starters. There has been a great deal of exchange of ideas between Linux and *BSD; the FreeBSD VM subsystem, for example, has long been seen as an inspiration by at least some Linux kernel hackers. We have all benefitted from the OpenBSD security auditing work. Red Hat, in the name of patent defense, is cutting off the flow of ideas in one direction. That is not how free software is supposed to work. Red Hat should find a way to deal with software patents that does not alienate a large and valuable part of the free software community.
As a starting point, why not contribute these new patents (and the various gcc patents said to have been originally obtained by Cygnus) to a free software "patent pool"? The patents would be licensed for any use as long as the licensee does not sue any company alleging patent infringement by any free software used or distributed by that company. If it is absolutely necessary to dirty one's hands with software patents, this approach seems more constructive and beneficial to the community.
ADEOS - avoiding real-time Linux patents
The current systems for performing hard real-time tasks with Linux (RTLinux and RTAI) take the same approach: use a real-time kernel at the lowest level of the system, and run the general purpose kernel (i.e. Linux) as the lowest-priority task. This technique has been patented by Victor Yodaiken, and the patent has been licensed to the community under terms similar to those used by Red Hat: as long as your work is licensed under the GPL, you can use the patented technology without paying royalties.This patent and its license have been the subject of endless controversy in the free software community. In particular, developers and users of RTAI have always felt a little nervous, especially when the RTAI core was licensed under the LGPL. The recent relicensing of the RTAI core was undertaken to be sure of compliance with the patent license, but not everybody has been satisfied. In particular, people who wish to run or distribute proprietary systems using RTAI have been unsure of their status.
An obvious solution, one might think, would be to not use the patented technology; until recently, however, alternatives have been somewhat scarce. That situation may have changed, however, as the result of the announcement of the upcoming first release of ADEOS.
ADEOS is, essentially, a small "nanokernel" which takes charge of low-level hardware resources (interrupts in particular). Any number of higher level operating systems can run in parallel on top of ADEOS; they run independently and know little of each other. ADEOS implements an abstraction called an "interrupt pipeline," which is essentially an ordered list of systems which are interested in a particular interrupt. Real-time systems put themselves at the head of the list, and are thus able to respond quickly to interrupts. General purpose systems can handle any interrupts which the real-time systems allow to pass down the pipeline.
The idea of running multiple operating systems over a small, low-level kernel is not particularly new; IBM has been doing it for decades. It is interesting, however, in that the ADEOS developers claim that it is suffiently different from the RTLinux approach that it is not covered by the patent. The reality of the situation, however, may not be determined until a fair number of lawyers have been involved.
The RTAI project plans to move over to ADEOS and thus, with luck, free itself of patent worries. Whether RTAI will be able to rid itself of the persistent claims that it is a derivative of RTLinux could be another story. RTLinux supporters will point out strong similarities between a number of source files in the two projects. If RTAI really used RTLinux code at the beginning, and released that code under a different license (even if that license was the LGPL), the project has, in theory, lost its rights to use that code. Nobody has seriously pursued a GPL infringement claim against RTAI, but, as long as the allegations persist, such an action is a possibility.
Meanwhile, ADEOS embodies a different approach to dealing with software patents: find a way to work around them. From the press release:
Often a piece of Free Software, into which many people have
invested years of work, can be turned into non-free software by a
patent for one simple but essential calculation rule. Our example
shows that the developers need not always give up. Sometimes, by
trying very hard, an alternative calculation rule that does the
work and is not completely useless can be found. Developers should
not shy [from] the effort that this takes, because even if the patent
owner offers a license on friendly terms, usually the project will
be restricted in some way or other and the intentions of the
developers to create real Free Software will be betrayed.
This approach has been taken with other patents: using JPEG and PNG files to get around the GIF patent, and Ogg Vorbis as an alternative to MP3, for example. As software patents proliferate in the U.S., however (and possibly spread to Europe), it will get always harder to dodge them all. And tiresome as well. Software patents remain a threat to free software.
(See also: a more detailed, technical description of how ADEOS works.)
UnitedLinux makes its launch
After a suitable period of pre-launch hinting, the UnitedLinux initiative sent out a press release announcing its existence. A press release is about all there is, at the moment; the realization of the goals behind United Linux will take a little longer.UnitedLinux is a joint venture between Caldera, Conectiva, SuSE and Turbolinux. Essentially, the four will be combining much of their Linux distribution development operation. The advantages of this combination are fairly clear: much duplicated work can be eliminated, and the companies will have at their disposal a single base distribution which is standards compliant and uniform. The companies' four distributions have all lacked sufficient market share to inspire software vendors to target them. One, larger distribution, it is hoped, will be more successful at attracting the independent software vendors of the world.
An alpha release of UnitedLinux, apparently based most heavily on SuSE's distribution, is due in the near future, with the general release happening in the fourth quarter of this year. Each distributor will then add its own special offerings and sell the result under its own brand. Interestingly, the UnitedLinux release plans page mentions KDE 3.0, but says nothing about GNOME. Several "installation languages" will be supported.
The biggest controversy over UnitedLinux would appear to be whether it will be available as a free download. The initial statements from the group have been mixed. We will have to wait and see on that one. A more worthwhile question might be: will UnitedLinux expose its development version the way Mandrake, Debian, and Red Hat (sort of) do? Inviting outsiders into the development process is a far more convincing sign of openness than distributing free binaries.
The other open question, of course, is: what other companies might join? An invitation has been extended to Red Hat, but nobody really expects that company to want to be a part of UnitedLinux. MandrakeSoft is a more interesting possibility; it is by far the largest other distributor which is not currently a part of the group. Thus far, MandrakeSoft has been awfully quiet about UnitedLinux.
If UnitedLinux lives up to its promise, it could become the platform upon which a new generation of distributions can grow. Doing UnitedLinux right, however, will require keeping both the free software community and the commercial world happy. This goal should be achievable; we wish this group luck.
The new LWN.net site
Back in August, 1998, LWN made a major site change: we went from the "everything on one big page" format to the multi-page format that is still used for the weekly edition. We got over 100 complaints about that change - people liked things the old way. So we restored the "one big page" as an option, and it is still used by a (declining) number of LWN readers.As you can see, LWN has changed format again; see our introductory posting for a description of what has changed. We'll say here, however, that what has not changed is LWN's content. The presentation is different, and a number of new capabilities have been added, but our writing remains as always.
By the standards of 1998, the reaction to this change has been relatively muted. Some people like the new site, others do not, but there has been no avalanche of complaints. Which is fine with us. We are certainly interested in hearing from our readers (at lwn@lwn.net) about ways we could improve the new site; we do request, however, that commenters be specific about what they do or do not like. We try to respond to specific complaints, but there's not much that we can do with a message that just says "I hate the new site."
There are certainly some rough edges on the new site. Bear with us, and we'll do our best to straighten them out. Meanwhile, please check out the new features, and, we hope, enjoy the new LWN experience.
(Note that people who want to see something that resembles the old site can bookmark lwn.net/current, which always gives the current weekly edition, or lwn.net/current/bigpage, which is the "one big page" format).
Security
Welcome to the new LWN.net Security Page
Our first site code upgrade in nearly four years introduces an integrated security alert and vulnerability database. Our archive of security alerts dating back to July, 2001 now lives in a PostgreSQL relational database. Vulnerabilities and alerts are actually linked to each other. Recent alerts and vulnerabilities use Common Vulnerabilities and Exposures (CVE) numbers to uniquely identify each vulnerability.Today you can browse alerts and vulnerabilities using the links at the top of each page. When viewing an alert, you can view the corresponding vulnerability description with a mouse click.
In the future expect, and please continue to suggest, ways for us to better provide you with the security information you seek.
US TurboLinux Security Severely Out of Date (iDEFENSE Labs)
iDEFENSE Labs has issued a security advisory for the US TurboLinux distribution.
The collective security weakness of the outstanding issues listed
below is staggering. The following is a list of the most serious
problems for which most other Linux vendors have provided updates on
their US sites. It represents the outstanding security problems
associated with the limited TurboLinux distributions and updates that
have been available on the US sites only.
LWN has pointed out in the past that Turbolinux has not been serious about security updates. With luck this advisory - or, perhaps, the UnitedLinux effort - will help get this distributor back on track.
Brief items
Unique Preventative IDS for Linux
Scott Wimer, Chief Technology Officer of Cylant, dicusses preventive security in this paper.
The recent vulnerabilities with OpenSSH software demonstrate that even intensive auditing cannot necessarily root out all the defects from software. As software systems become larger and more complex, intensive auditing becomes more expensive and more difficult. Software audits
simply cannot be relied upon to find all of the security vulnerabilities in any given system.
Biometric Access Protection Devices and their Programs Put to the Test (c't)
C't has published a study of eleven biometric access controls intended to prevent unauthorized access. "In our attempts at outfoxing the protective programs and devices we have concentrated on the first method: direct attempts at deceiving the systems with the aid of obvious procedures (such as the reactivation of latent images) and obvious feature forgeries (photographs, videos, silicon fingerprints)."Also see Bruce Schneier's previously published CRYPTO-GRAM newsletter for May for a look at a technique for fooling fingerprint scanners with fake fingers made of gelatin.
Security reports
Download Sites Hacked, Source Code Backdoored (Security Focus)
Brian McWilliams reports on the recent contamination of Fragroute with a backdoor. "According to program developer Dug Song, the source code to the Dsniff, Fragroute, and Fragrouter security tools was contaminated on May 17th after an attacker gained unauthorized access to his site, Monkey.org."Note: Copies of Dsniff, Fragroute or Fragrouter downloaded from Monkey.org between May 17th and May 24th are contaminated and require replacement. For more details, see Dug Song's post to bugtraq about the incident.
OpenSSH 3.2.3 released
Following on the heels of the last release, OpenSSH version 3.2.3 has been announced. This version fixes a few bugs that showed up in version 3.2.2.Ethereal 0.9.4 released
Ethereal 0.9.4 was released on May 19, 2002 fixing four potential security issues in Ethereal 0.9.3:- The SMB dissector could potentially dereference a NULL pointer in two cases.
- The X11 dissector could potentially overflow a buffer while parsing keysyms.
- The DNS dissector could go into an infinite loop while reading a malformed packet.
- The GIOP dissector could potentially allocate large amounts of memory.
No known exploits exist "in the wild" at the present time for any of these issues.
Information Disclosure Vulnerability in IDS 0.8x
IDS is a CGI script that generates a multi-gallery photo album for a website on the fly. IDS 0.8x is reported to have a directory disclosure vulnerability.CGIscript.net - csPassword.cgi has multiple vulnerabilities
Steve Gustin has reported multiple vulnerabilities in the csPassword.cgi script from CGIscript.net "Make sure you only allow trusted users to use the csPassword application and make sure your web server in configured to deny requests for .ht* and *.tmp files."Caldera Security Advisory - Volution Manager
Volution Manager stores the unencrypted Directory Administrator's password in the /etc/ldap/slapd.conf file. This vulnerability will be corrected in the next release of Volution Manager.(Proprietary product) Informix SE-7.25 Local Vulnerability
A buffer overflow vulnerability was reported in Informix SE-7.25 if INFORMIXDIR enviroment variable is defined with a size greater than 2023 bytes.
New vulnerabilities
Denial of service vulnerability in version 9 of BIND
| Package(s): | bind | CVE #(s): | CAN-2002-0400 | ||||||||||||||||||||||||
| Created: | June 5, 2002 | Updated: | August 19, 2002 | ||||||||||||||||||||||||
| Description: | Here is an advisory from the Computer Emergency Response Team (CERT)
regarding the denial of service vulnerability in version 9 of the BIND
nameserver, up to 9.2.1. An attacker can send a properly crafted packet
which triggers a check within BIND and causes it to shut down. The
vulnerability can not be exploited for any purpose beyond denial of
service, but that is bad enough; if you are running BIND 9, an upgrade
is probably a good idea.
Note that many or most systems out there will still be running BIND 8, and thus will not be vulnerable. News articles on the vulnerability appear in the Register and Network World Fusion News. | ||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||
Ghostscript arbitrary command execution vulnerability
| Package(s): | ghostscript | CVE #(s): | CAN-2002-0363 | ||||||||||||||||
| Created: | June 5, 2002 | Updated: | June 12, 2002 | ||||||||||||||||
| Description: | Ghostscript may be used to execute arbitrary commands with a maliciously formed PostScript file.
Since ghostscript is frequently used while printing documents, updating
is strongly recommended.
The vulnerability has been fixed in the 6.53 source release of GNU Ghostscript. | ||||||||||||||||||
| Alerts: |
| ||||||||||||||||||
Mailman 2.0.11 fixes two cross-site scripting vulnerabilities
| Package(s): | mailman | CVE #(s): | CAN-2002-0388 | ||||||||||||||||||||||||
| Created: | June 5, 2002 | Updated: | August 28, 2002 | ||||||||||||||||||||||||
| Description: | Barry A. Warsaw announced the release of Mailman 2.0.11 "which fixes two cross-site scripting exploits, one reported by "office" in the admin login page, and another reported by Tristan Roddis in the Pipermail index summaries. It is recommended that all sites upgrade their 2.0.x systems to this version." | ||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||
String format bug in pam_ldap logging
| Package(s): | nss_ldap | CVE #(s): | CAN-2002-0374 | ||||||||||||||||
| Created: | June 5, 2002 | Updated: | October 29, 2002 | ||||||||||||||||
| Description: | The nss_ldap package includes the pam_ldap module for authenticating a user with an LDAP database. Pam_ldap versions prior to 144 have a string format bug in the logging mechanism. | ||||||||||||||||||
| Alerts: |
| ||||||||||||||||||
Malformed NFS packet buffer overflow vulnerability in tcpdump
| Package(s): | tcpdump | CVE #(s): | CAN-2002-0380 | ||||||||||||||||||||||||||||
| Created: | June 5, 2002 | Updated: | October 9, 2002 | ||||||||||||||||||||||||||||
| Description: | A buffer overflow in tcpdump can be triggered by a bad NFS packet when tracing the network. Unmodified tcpdump versions 3.6.2 and earlier are vulnerable. | ||||||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||||||
Uucp authentication agent, in.uucdp, bad string termination
| Package(s): | uucp | CVE #(s): | |||||
| Created: | June 5, 2002 | Updated: | June 5, 2002 | ||||
| Description: | The in.uucpd authentication agent in the uucp package does not properly terminate some long input strings. | ||||||
| Alerts: |
| ||||||
xchat IC server based dns query vulnerability
| Package(s): | xchat | CVE #(s): | CAN-2002-0382 | ||||||||||||||||||||
| Created: | June 5, 2002 | Updated: | September 24, 2002 | ||||||||||||||||||||
| Description: | A malicious IRC server may return a response to a /dns query that executes arbitrary commands with the privileges of the user running XChat. Versions of XChat prior to 1.8.9 are vulnerable. | ||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||
Updated vulnerabilities
Ethereal packet handling vulnerabilities
| Package(s): | ethereal | CVE #(s): | CAN-2002-0353 | ||||||||
| Created: | June 5, 2002 | Updated: | June 12, 2002 | ||||||||
| Description: | Ethereal 0.9.3 fixed three
packet handling vulnerabilities present in 0.9.2 when it was released
by the ethereal team on March 30th.
The PROTOS test
suite found some flaws in SNMP and LDAP protocols support.
Malformed packets could also crash ethereal 0.9.2 due to a
ASN.1 zero-length g_malloc problem.
The zlib "double free" vulnerability
was addressed by the updates for that bug from many distributors. (First LWN
report: May 2).
Update: The May 19, 2002 release of Ethereal 0.9.4 fixes four potential security issues in Ethereal 0.9.3.Please see the new vulnerability for more information. | ||||||||||
| Alerts: |
| ||||||||||
Remotely-exploitable buffer overflow vulnerability in fetchmail
| Package(s): | fetchmail | CVE #(s): | CAN-2002-0146 | ||||||||||||||||||||
| Created: | June 5, 2002 | Updated: | June 18, 2002 | ||||||||||||||||||||
| Description: | Fetchmail versions prior to 5.9.10 have a buffer overflow vulnerability that may be exploited by a malicious IMAP server. The fetchmail client allocated memory to store the sizes of the messages it is attempting to retrieve based on a message count provided by the IMAP server. A malicious IMAP server could provide an artifically large message count to force the fetchmail process to write data outside of the allocated memory. (First LWN report: May 9). | ||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||
UW imapd remotely exploitable buffer overflow
| Package(s): | imap | CVE #(s): | CAN-2002-0379 | ||||||||||||||||||||||||||||||||||||
| Created: | June 5, 2002 | Updated: | December 20, 2002 | ||||||||||||||||||||||||||||||||||||
| Description: | UW imapd versions 2000c and prior allow remote authenticated users to execute code via a buffer overflow. A malicious user can craft a request to run commands on the server under their UID and GID. (First LWN report: May 23). | ||||||||||||||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||||||||||||||
OpenSSH 3.2.2 fixes multiple vulnerabilities
| Package(s): | openssh | CVE #(s): | |||||
| Created: | June 5, 2002 | Updated: | June 5, 2002 | ||||
| Description: | The OpenSSH developers have
released OpenSSH 3.2.2. Security fixes in this release are:
"
- fixed buffer overflow in Kerberos/AFS token passing - fixed overflow in Kerberos client code - sshd no longer auto-enables Kerberos/AFS - experimental support for privilege separation [...] - only accept RSA keys of size SSH_RSA_MINIMUM_MODULUS_SIZE (768) or larger" (First LWN report: May 23). | ||||||
| Alerts: |
| ||||||
UTF8 interaction bug in the perl-Digest-MD5 module
| Package(s): | perl-Digest-MD5 | CVE #(s): | |||||||||
| Created: | June 5, 2002 | Updated: | June 5, 2002 | ||||||||
| Description: | Versions prior to 2.20 of the perl-Digest-MD5 module have a bug in the UTF8 interaction with perl that produces UTF8 strings with improper MD5 digests. (First LWN report: May 16). | ||||||||||
| Alerts: |
| ||||||||||
Resources
CERT Summary CS-2002-02
The CERT Coordination Center (CERT/CC) issued their CERT quaterly summary "to draw attention to the types of attacks reported to our incident response team, as well as other noteworthy incident and vulnerability information."Announcing Fenris 0.06
Fenris 0.06 has been released by Michal Zalewski. "This release brings you much improved debugging capabilities, from a console-based debugging GUI [...], to core functionality fixes, anti-debugger techniques detection, better performance, or an updated write-up on debugging burneye-protected code."Linux Security Week and Advisory Watch
The June 3 Linux Security Week from LinuxSecurity.com is available, as are the Linux Advisory Watch Newsletters from May 24 and May 31.Book Review: SSH, The Secure Shell - The Definitive Guide
Danny Yee has reviewed SSH, The Secure Shell - The Definitive Guide published by O'Reilly & Associates in 2001.
Events
Upcoming Security Events
| Date | Event | Location |
|---|---|---|
| June 6 - 7, 2002 | Qualys Security Conference | (Hotel Nikko)San Francisco, CA |
| June 17 - 19, 2002 | NetSec 2002 | San Fransisco, California, USA |
| June 24 - 28, 2002 | 14th Annual Computer Security Incident Handling Conference | (Hilton Waikoloa Village)Hawaii |
| June 24 - 26, 2002 | 15th IEEE Computer Security Foundations Workshop | (Keltic Lodge, Cape Breton)Nova Scotia, Canada |
| June 28 - 29, 2002 | Edinburgh Financial Cryptography Engineering 2002 | Edinburgh, Scotland |
| July 31 - August 1, 2002 | Black Hat Briefings 2002 | (Caesars Palace Hotel and Resort)Las Vegas, NV, USA |
| August 2 - 4, 2002 | Defcon | (Alexis Park Hotel and Resort)Las Vegas, Nevada |
| August 5 - 9, 2002 | 11th USENIX Security Symposium | San Francisco, CA, USA |
For additional security-related events, included training courses (which we don't list above) and events further in the future, check out Security Focus' calendar, one of the primary resources we use for building the above list. To submit an event directly to us, please send a plain-text message to lwn@lwn.net.
Page editor: Dennis Tenney
Kernel development
Kernel release status
The current development kernel is 2.5.20, which was released by Linus on June 2. Big changes this time include a large ACPI merge, a bunch more buffer/VM work, a PowerPC64 merge, the usual set of IDE patches, various merges from the -dj series, some device model work, and numerous other fixes and updates. The long format changelog is also available.Other releases from Linus since the last LWN Kernel Page include:
- 2.5.19 (short, long). Changes include more block, buffer,
and IDE layer work, some enhancements to the driver model code, more
kbuild tweaks, and many other fixes and updates.
- 2.5.18 (short, long). This one included the software suspend patch (as covered in the May 23 LWN Kernel Page), a bunch of kbuild fixes (which are not Keith Owens's new kbuild system - see below), more IDE reworking, more VFS changes, and a bunch of other fixes and improvements.
The current prepatch from Dave Jones is 2.5.20-dj3. The most significant feature of this patch, perhaps, is the merging of some small pieces of the kbuild 2.5 code.
The latest 2.5 status summary from Guillaume Boissiere came out on June 5.
The current stable kernel release is 2.4.18. Marcelo's plan had been to create a 2.4.19 release candidate, but some problems turned up. So he released 2.4.19-pre10 instead. A very long list of fixes got into this release. With luck, the next prepatch from Marcelo will be the first 2.4.19 release candidate.
Alan Cox has released 2.4.19-pre10-ac2; arguably the most interesting change in this prepatch is the inclusion of the "speakup" console module for blind users.
A new way of block queue plugging
Jens Axboe has posted a patch which, once again, changes some of the main assumptions underlying the block I/O subsystem. It is worth a look at what is going on.A longstanding feature of the block layer has been "queue plugging." If the request queue for a particular block device has been plugged, that device's driver will not be invoked to execute the operations in the queue. The main reason for plugging has been to allow the block layer to build up a backlog of requests, so that adjacent operations can be merged. By sometimes waiting a little longer to start an operation, the block layer can often achieve better performance overall.
With the 2.5 block layer, however, there is less need for this sort of plugging. The code works harder at not splitting large requests in the first place, so it is not necessary to merge them again. The new plugging code actually serves a different purpose: it is a mechanism by which a block driver can indicate that it is busy and can not handle any more requests at the moment.
As Jens points out in his patch, the block code is starting to look a little (a little!) bit more like the networking subsystem. Like network interfaces, block devices can have multiple requests outstanding. When the device has been given all the simultaneous requests that it can handle, there is no point in further troubling the driver until some of those requests complete. Thus the new plugging code: block devices, too, can ask to be allowed to work in peace for a while.
There's a couple of other, incidental changes in this patch. One is that the venerable tq_disk task queue has been removed. Slowly, the set of standard task queues is shrinking. A block driver's request ("strategy") function is also now called out of a tasklet. The block layer that shows up in 2.6 will be vastly different from what has been seen in previous stable kernels.
Splitting the kernel stack
The Linux kernel has, for years, run with an 8KB (two page) stack in each process's address space (at least, on i386 systems). That stack holds the "task structure" (the kernel's information about the process) and provides space for automatic variables and call frames when the system is running in kernel mode. The 8KB stack works, of course, but it is not optimal. The biggest problem, perhaps, is the need to find two adjacent pages for a new stack every time a new process is created. On a busy system memory can get badly fragmented, and allocating two pages together can be a challenge.So Ben LaHaise has posted a patch which splits the kernel stack into two 4KB stacks. One of them holds the task structure and is used by normal kernel code (i.e. handling system calls). The other stack is set aside and is used only when the kernel is handling interrupts.
A separate interrupt stack is not a particularly new idea - many operating systems have had interrupt stacks for decades. There are numerous advantages to doing things this way. Only one interrupt stack (per CPU) is needed, so one page of memory per process is freed up. The interrupt stack is also more likely to stay in the processor cache, improving performance. Interrupt handlers need not worry about other kernel code having consumed most of the stack when they get invoked. And, of course, it is no longer necessary to perform a two-page allocation to set up the regular kernel stack.
The biggest downside, perhaps, is that non-interrupt kernel code must now fit into much less stack space. Some kernel code is not particularly careful about the size of its automatic variables, and risks overflowing the new, smaller stack. As a way of tracking down such code, Ben has also posted a stack checker (followed by a brown paper bag fix) which monitors stack usage and raises the alarm when available space on the stack gets too low. The two patches are probably best used together.
The continuing saga of kbuild 2.5.
The discussion over whether to merge kbuild 2.5 has been covered in this space before. It is one of those conversations that persists, however. A few things have happened over the last few weeks.Keith Owens, the author of kbuild 2.5, has posted a new set of timing comparisons meant to show the advantages of the new code. The full build process Keith performed took a bit less than 14 minutes with kbuild 2.5, and a little over 20 minutes with the existing kbuild. He also points out that the result is sometimes incorrect with the existing code.
Daniel Phillips also tried it out and
obtained similar results. For good measure, Daniel took a look at the code
itself: "There is no Python anywhere to be seen in kbuild 2.5, for
those who worry about that. It is coded in C, about 10,000 lines it seems.
It has a simple built in database which I suppose accounts for some of
that. For what it does, it seems quite reasonable.
"
In general, most (but not all) developers who express an opinion on the matter seem to feel that kbuild 2.5 is worthwhile and should be merged. So it has surprised a number of people to see numerous patches to the existing kbuild system, written by Kai Germaschewski, being merged by Linus. These patches do worthwhile things, but they are not kbuild 2.5. Why bother, one might ask, if the whole thing is going to be replaced?
The answer seems to be that Linus, for now, wants Kai to be the kbuild maintainer. Kai is willing to do things in small pieces, which has always been Linus's preferred method; Keith has, so far, refused to break his kbuild work up in this way. Also, says Linus:
Kai isn't an enthusiastic kbuild-2.5 supporter. In fact, he tends
to be a bit down on some of it. Which is a plus in my book: it
means that whatever Kai tries to push my way I'll feel just that
much more comfortable with as having had critical review.
Meanwhile, a couple of different developers (Sam Ravnborg and "Lightweight patch manager") have started submitting broken up versions of kbuild 2.5. Kai has stated that he will look them over and integrate those which make sense. Some of these patches also found their way into 2.5.20-dj3. It seems like at least a partial victory for the new kbuild.
So one has to wonder why, after all this, Keith felt the need to post his call for an email campaign entitled "If you want kbuild 2.5, tell Linus." It's a full-scale polemic that takes one back to the old devfs wars. It is also, seemingly, counterproductive. One would think that would be better to work with the people who are trying to make kbuild acceptible to Linus than to call for a pressure campaign.
The value of negative dentries
A "directory entry" (dentry) is an internal data structure used to hold the results of looking up a file in the filesystem. The Linux "dentry cache" keeps a number of recently used dentries around; they tend to be useful, since files are often accessed more than once over a short period of time. Finding a file in the dentry cache can save a lot of time by avoiding a full filesystem lookup.The kernel also hangs on to "negative dentries," which indicate that the given file does not exist. Andrea Arcangeli recently noted that these negative dentries can take up quite a bit of memory, and wondered what possible use they could be. His message included a patch to force negative dentries out of memory quickly.
It turns out, though, that "this file does not exist" can be useful information. A quick strace run on a GNOME application, for example, turns up dozens of lookups on nonexistent files as the application gropes around looking for the unbelievable number of libraries it needs. Similarly, apache is continually looking for .htaccess files, shells look for executables, etc. It is more than worthwhile to be able to determine that a file doesn't exist without an expensive filesystem call - especially for file names that are often looked up. So negative dentries will stay.
There is one optimization that can be made, though. In Andrea's case, the negative dentries were created by deleting a large directory full of files. When a file is deleted, it is relatively unlikely that it will be looked up again soon, and keeping a negative dentry around is less useful. In this case, perhaps, it is better to just forget about the file name altogether.
The return of /dev/port
A few weeks ago, LWN reported on the removal of support for /dev/port from the 2.5 kernel. Since then, a few users have reported real uses for /dev/port and a desire that it stay in the kernel. Martin Dalecki, who create the patch removing /dev/port, suggested that users who really need it can patch it back in themselves. Linus disagreed, saying:
So when simplifying, it's not just important to say "we could do
without this". You have to also say "and nobody can reasonably
expect to need it".
Which doesn't seem to be the case with /dev/ports. So it stays.
That is, of course, the definitive end to the discussion.
Resources
A few other worthwhile notes:- Kernel Traffic issues 168
and 169
are available.
- The Linux Security Module web
site has been overhauled in a big way. "
It's no longer an endless dribble of old patches. It contains some information about the project, more navigable patch listing, links to the BK repositories, and links to all the documentation that I am aware of.
" - Late last April, we mentioned that Pacific Northwest National Laboratory was seeking an experienced kernel programmer to work on its new, 1400-node Linux cluster. The position is still open, so go check it out if you think you might be interested.
Patches and updates
Kernel trees
Andrea Arcangeli
2.4.19pre9aa1 Included the integration of the O(1) scheduler - "highly experimental."
?
Marc-Christian Petersen
2.2.21-3-secure Many goodies for 2.2: OpenWall, ext3, ReiserFS, CryptoAPI, ACLs, USAGI, FreeS/Wan, 2.4 IDE, etc. "<q>The intended purpose is for production/servers.</q>"
?
Architecture-specific
James Bottomley
i386 arch subdivision into machine types for 2.5.18 "<q>This code rearranges the arch/i386 directory structure to allow for sliding
additional non-pc hardware in here in an easily separable (and thus easily
maintainable) fashion.</q>"
?
Thomas Capricelli
linux zeta-0.2 released Zeta is a virtual platform to which the group is porting Linux.
?
Build system
Core kernel code
Robert Love
scheduler hints Allow applications to give hints to the scheduler on how they will behave.
?
Dipankar Sarma
Dynamic percpu data allocator Adds dynamic per-CPU data to the existing static implementation.
?
William Lee Irwin III
lazy_buddy-2.5.19-3 A "bugfix and cleanup release" of the new, deferred coalescing memory allocator.
?
Andrew Morton
direct-to-BIO writeback Perform filesystem writeouts direct to the block layer via BIO requests - no more buffer heads. At least in simple cases.
?
Andrew Morton
direct-to-BIO readahead Make the readahead code work without buffer heads. "<q>CPU load for `cat large_file > /dev/null' is reduced by approximately
15%.</q>"
?
Development tools
Device drivers
Marc Boucher
New hsflinmodem-5.03.03.L2mbsibeta02060100 release Driver for Conexant HSF softmodems.
?
Marc Boucher
New hcflinmodem-0.93mbsibeta02060100 release Linmodem driver for Conexant HCF modems.
?
Documentation
Patrick Mochel
device model documentation 1/3 Documentation of the device model code - part 1 covers the <tt>bus_type</tt> structure.
?
Filesystems and block I/O
Steve Best
Journaled File System (JFS) release 1.0.18 Adds the capability to run the journal on an external device.
?
Andreas Gruenbacher
Status of 2.5.x port An initial port of the extended attribute/access control list code to 2.5.
?
Janitorial
Rusty Russell
Continuing copy_to/from_user & clear_user "<q>Linus' "more powerful interface" continues to bite.</q>" For 2.5.19.
?
Networking
Jon Grimm
New lksctp release: lksctp-2_5_15-0_4_9 The latest version of the Stream Control Transmission Protocol.
?
Security-related
Miscellaneous
Andy Pfiffer
fastboot mailing list at OSDL: fastboot@lists.osdl.org A new mailing list for the discussion of ways to get your computer up and running more quickly.
?
Page editor: Jonathan Corbet
Distributions
News and Editorials
Announcement: the AGNULA project
The AGNULA project aims to develop two reference distributions for the GNU/Linux operating system completely based on Free Software (i.e. under a FSF approved Free Software license) and dedicated to audio and multimedia. One distribution will be Debian-based (DeMuDi) and the other will be Red Hat-based (ReHMuDi).Scyld Beowolf
In the May 23rd Distributions page the Scyld Beowulf Cluster Operating System was incorrectly identified as hardware specific. In fact the Scyld distribution supports x86, Alpha, and other platforms.
Distribution News
Debian GNU/Linux
The Debian Project has sent out a release describing what is claimed to be a new intercontinental Internet performance record: the first Debian Woody CD was transferred from Fairbanks, Alaska to Amsterdam in 13 seconds. The systems on both ends were running Debian, of course.The Debian Weekly News for May 23 is out, with coverage of MPlayer, Nessus, the fair use status of the fortunes file, and more.
Here's the Debian Weekly News for May 29. It looks at the new Debian Flyers, the abortive attempt at packaging WineX, apt preferences, and more.
In this announcement Josip Rodin discusses woody
release status. "To reiterate the main point from the April 30th mail by Anthony Towns, the
release of woody is being held back because there is no systematic way to
build packages in security advisories on all architectures included in
woody.
"
Mandrake Linux
Issue #43 of the Mandrake Linux Community Newsletter is out. "This Week's Summary: StarOffice 6.0 Officially Released; Spotlight on MandrakeExpert; MandrakeClub Activities; Website of the Week (plf.zarb.org); Online Survey; Ximian GNOME for Mandrake 8.2; Mandrake in the News; Website Updates; Software Updates; Headlines from MandrakeForum."
The Mandrake Linux Community Newsletter for June 1 (issue #44) is out. It covers the MandrakeSoft.com redesign, the Business Case of the week, recent security alerts, and more.
Red Hat Linux
Red Hat has two bug fixes out for this week. There are new SANE packages for RH 7.3 which fix a problem observed when upgrading SANE. There are also new XFree86 packages are available which fix various bugs reported since the last erratum update. These are available for RH 7.1 - alpha, i386, ia64 and RH 7.2 - i386, ia64.Slackware Linux
On May 25, 2002 Slackware 8.1-rc1 was announced. That was followed by Slackware 8.1-rc2, announced on June 1, 2002. Since then much progress has been made on cleaning up the remaining bugs. As always the Slackware-current change log contains the details.Yellow Dog Linux
Terra Soft Solutions, Inc., publishers of Yellow Dog Linux, announced the Japanese edition of Yellow Dog Linux 2.2, which will be showcased by Amulet at LinuxWorld Tokyo.Yellow Dog Linux has an updated errata page which YDL users might want to take a look at. There are also some bug fix advisories out.
New glibc packages are available, fixing a bug in YDL 2.2 that may cause programs to seg fault. Updated mpg321 packages are available for which fix a buffer overflow in the network streaming code as well as other bugs. Finally, updated kdebase packages are available that change the default artsd behavior to use 8-bit mode which allows sound to function.
New Distributions
MicroBSD
MicroBSD is a hardened, secure, Posix1e, small foot print OS. It is currently available for x86, with Alpha, Sparc, and PPC ports in the works. It aims to use as little hard disk space as possible while providing a fully functional system. A 0.4 Mini and Full x86 release version was announced May 28, 2002. (Thanks to Joe Klemmer)New distribution: WISP-Dist
The first public release of WISP-Dist, a new embedded distribution, has been anounced. It runs out of 8MB flash and is aimed primarily at running wireless routers.
Minor distribution updates
Astaro Security Linux
Astaro Security Linux has released stable version 3.2. "The most important new key features are a PPPoE client, a DHCP server and client, sophisticated reporting and log file handling, traffic shaping, heavily improved HTTP and SMTP proxies, IPSec with X.509 certificates and AES encryption, PKI management for the X.509 certificates, surf protection (with optional URL listing with 12 mio entries), and High Availability (with optional hot standby)."
Devil-Linux 0.5RC1
Version 0.5RC1 of Devil-Linux has been announced.Gnome2 -beta5 and beyond available on Gentoo
Gnome2 is now available for the Gentoo portage system.Knoppix
KNOPPIX has released version 1.5, its first appearance on Freshmeat.Lycoris Desktop/LX Continues Grow in Popularity
Lycoris products Desktop/LX Personal and Desktop/LX Deluxe are now available at Fry's Electronics retailers; and other Desktop/LX news.
Distribution reviews
Mandrake gets top billing in Desktop Linux poll
According to this DesktopLinux.com story, Mandrake Linux is the most popular desktop Linux system.Linuxlookup.com reviews Red Hat 7.3
LinuxLookup.com features a review of Red Hat Linux version 7.3.3 Distributions Power Up Linux (eWeek)
eWeek Labs tested SuSE Linux 8.0, Mandrake Linux 8.2 and Red Hat Linux 7.3. They say "... the penguins have made some great strides in usability - to the point that users unfamiliar with Linux could comfortably find their way through a machine installed with any of these Linux variations." (Thanks to Brian Park)
SuSE 8.0, KDE 3.0 first look (Register)
The Register checked out SuSE 8.0 and KDE 3.0. "I've been using SuSE 7.3 pretty much exclusively on my personal machines for five or six months now, though with several upgrades of the kernel, FreeType, KDE, etc. It's accessible to Linux newbies if not exactly easy, yet reasonably power-user friendly. It may well be the best of all the packaged distros. And while there are imperfections in a few of the packages, overall I'd have to say that 8.0 is a solid step forward. I'll be keeping it, that's for sure." (Thanks to Micha H. Werner)
Page editor: Rebecca Sobol
Development
Mozilla.org launches Mozilla 1.0
Here it is at last: the press release announcing the launch of Mozilla 1.0. "Built on the Gecko layout engine, Mozilla 1.0 is cross-platform and integrates a core set of applications that allow users to access the capabilities of the Web, including a web browser, an email reader and a chat client." Congratulations are due to the Mozilla team, which has worked a long time to create this release.
For more coverage, see the articles on mozilla.org and Mozillazine.
System Applications
Education
Linux in education report #71
The Linux in education report #71 is available. This week Sun donates StarOffice 6.0 to schools, the Connexions Project, and more.
Electronics
gEDA news
The gEDA site lists new versions of the Icarus Verilog compiler and gEDA/gaf, a collection of electronic CAD tools.
Networking Tools
OpenSSH 3.2.3 released
Following on the heels of the last release, OpenSSH version 3.2.3 has been announced. This version fixes a few bugs that showed up in version 3.2.2.gFTP: 2.0.12 has been released
Version 2.0.12 of the gFTP FTP client has been released. This release fixes a number of bug fixes and features support for the Bulgarian and Norwegian languages.
Printing
Omni printer driver version 0.7.0 released
Version 0.7.0 of the Omni printer driver has been released. This version features a new build environment and a number of bug fixes.
Science
GT.M V4.3-001A Released (Linux Med News)
Linux Med News reports on the release of a new version of GT.M. "For those of you just tuning in, this is an open source Mumps compiler which is making the Veterans Administration VistA software available to civilian types."
Web Site Development
mnoGoSearch 3.2.5 released
Version 3.2.5 of the mnoGoSearch web site search engine has been released. A number of bug fixes and security changes are included, see the Change Log for more details.New mod_perl's released (use Perl)
Use Perl is carrying an announcement for two new releases of mod_perl.
Zope Members News
The latest items on the Zope Members News site include stable release version 1.5 of the Ordered List Product, version 0.6.1 of the emil email client, and the founding of a German Zope user's group.
Standards
Public review of the LSB's gLSB & archLSB-IA32 v1.2 written specs
The draft gLSB and archLSB-IA32 v1.2 written specifications for Linux will be published on the web Monday June 3rd for a two week public review. The Linux community is invited to comment by Monday June 17th.
Miscellaneous
Wine Weekly News Issue 124
Issue #124 of the Wine Weekly News is out. Topics include a Win4Lin review, tips on helping Wine development, code practices, printing multi-byte characters, WineX and Debian, and more.
Desktop Applications
Audio Applications
WaveSurfer 1.4.1 released
Version 1.4.1 of the WaveSurfer sound visualization and manipulation tool has been released. Minor enhancements and bug fixes have been added and some speech utilities have been fixed.Jack 0.34.0 released
Version 0.34.0 of Jack, the Jack Audio Connection Kit has been released. In this version, the API has been stabilized, see the release notes for all of the details.
Desktop Environments
KDE 3.0.1 released
A new release of the KDE desktop environment has been announced. "KDE 3.0.1 is primarily a translation release for KDE 3.0, which shipped in early April. In addition, KDE 3.0.1 offers a number of performance and usability enhancements." (Thanks to Scott Dowdle.)
GARNOME Preview Seven
GARNOME 0.10.1 ("the bad-ass, bleeding edge GNOME distribution for testers and tweakers everywhere") has been released.. There's a number of new goodies in this release, including a "magicdev" preview and an interesting surprise.GNOME Summary for May 25 to June 1
The Gnome Summary for May 25 through June 1, 2002 is out. Topics include the GNOME 2 hard freeze, hacking GTK+ apps in LOGO, GnomeMeeting for Gnome2, gthumb, the accessibility framework explained, and more.GNOME Summary for May 19 to May 25
The GNOME Summary for May 19 to May 25th looks at Sun and MetaCity, an interview with Murray Cumming, how AbiWord points the way to tables, GNOME vrs KDE, Glade 1.1.0 beta release, and much more.KC KDE #37 and #38 are Out
Issue #37 of Kernel Cousin KDE covers KMathCenter, Kopete, Kicker improvements, Keramik window decoration, and more. Issue 38 covers the Klingon invasion, CVS Kung-Fu, and Mime news.
Games
New games on Pygame
New items on the Pygame site include Pyx 0.9, Solarwolf 1.1, Cog engine 1.1.2, 4stattack 2.0, and Pyui 0.91.
Graphics
KPovModeler: A Graphical Modeler for KDE
KDE.News covers the 0.2 release of KPovModeler. "KPovModeler is a full-featured graphical modeler and composer for creating POV-Ray(TM) scenes under KDE 3. It now supports almost the full gamut of POV-Ray 3.1 functionality -- see these nice screenshots. KPovModeler is a new member of the KDE Graphics package, but we are still looking for a documentation writer to join the project."
Office Applications
AbiWord 1.0.2 released
Gnotices is carrying the news of the AbiWord 1.0.2 release. The biggest change seems to be the ability to embed AbiWord in other GNOME applications (such as Evolution or Gnumeric).AbiWord Weekly News
Issue #94 of the AbiWord Weekly News is out. It looks at continuing bug fixing activities and the 1.0.2 release.LyX 1.2.0 released
Version 1.2.0 of the LyX document processor - the first stable release in some time - has been announced. There is a long list of new features; see the announcement for the full scoop.Two new Gnumeric releases
The Gnumeric project has announced two new releases of the Gnumeric spreadsheet. Version 1.0.7 is a bug fix release on the stable branch; it also includes better multilingual support. 1.1.5, instead, is a development release with quite a few new features including much improved printing support.
Languages and Tools
Lisp
Perl
Apocalypse 5 - Regular Expressions
Perl.com is running Apocalypse 5, the next installment in Larry Wall's definition of the Perl 6 language. This one deals with regular expressions. "In fact, regular expression culture is a mess, and I share some of the blame for making it that way. Since my mother always told me to clean up my own messes, I suppose I'll have to do just that."
perl 5.8.0 RC 1 Released (use Perl)
Use.perl.org is carrying the announcement of the first Perl 5.8.0 release candidate. "This is a release candidate, and is not recommended for use in a production environment, but downloading and testing is strongly encouraged."
SVG 2.1 Released (use Perl)
Use Perl Covers the release of SVG 2.1. "RO IT Systems has released SVG 2.1, a module for the server-side generation of images under the W3C SVG 1.0 recommendation. It is available through the CPAN and as a PPM on the company SVG site. Version 2.1 provides improved scripting and SMIL animation support. Also see the SVG::Parser companion module for parsing SVG images into the SVG module DOM."
PHP
PHP Weekly Summary
The June 3, 2002 PHP Weekly Summary is available. Topics include bug hunting, bundled XML, the PHP C-based extension library, DOMXML code changes, and more.
Python
Catching up with Python-URL
A few issues of Dr. Dobb's Python-URL have come out since the last LWN development page:- The May 22 issue has quick looks at Python and KDE, the Python Spread module, and more.
- The May 28 edition has extensive entries on programming libraries, features discussions, and more.
- The June 3 issue looks at Pycaml, Twisted, Pygame, email parsing, PySQLite, and much more.
The Daily Python-URL
This week's Daily Python-URL features an interview with Steve Alexander and Stephan Richter, and covers the Snake Farm project, the Toy Parser Generator, XML processing in Python, Python milters for Sendmail, using Zope with Apache, and more.
Ruby
The Ruby Garden
This week's Ruby Garden looks at font initialization, changing the do...end syntax, Array#rotate!, and more.Ruby Weekly News
The June 6, 2002 edition of The Ruby Garden covers ruby-gsl 0.1.6, REXML 2.3.4 and 2.2.2, FAM-Ruby 0.1.0, RubyStudio 0.2, and Gnokii.
Tcl/Tk
Dr. Dobb's TCL-URL!
The May 23, 2002 Dr. Dobb's Tcl-URL! covers the latest Tcl developments.Dr. Dobb's Tcl-URL!
The May 29, 2002 Dr. Dobb's Tcl-URL! looks at time server interaction, manipulation of TCL lists in C, creating new data types in C, migrating from Java to TCL, and more.
Miscellaneous
GNUstep Weekly Editorial
The June 3, 2002 edition of the GNUstep Weekly Editorial is out with coverage of the latest developments in the GNUstep Object Oriented development environment.Jext 3.1pre4 available
Version 3.1pre4 of the Jext programmer's editor is available. This version includes bug fixes, and lots of new features, see the list of changes for the details.
Page editor: Forrest Cook
Linux in Business
Business News
Coalition Asks European Parliament to Vote Against Data Retention
A coalition of 40 civil liberties organizations from 15 countries have sent the European Parliament an open letter which strongly recommends that Members vote against general data retention of communications by law enforcement authorities. There is also a petition that can be signed by those opposed to increased surveillance.SOT, MySQL and EFFI Team up to Oppose Software Patents
SOT has joined forces with MySQL AB and local lobby group Electronic Frontier Finland (EFFi) to file a statement to the Finnish Ministry of Trade and Industrial Affairs opposing the proposed EU directive that could allow software patents within Europe.Notes from the BPDG conference call
FSF Executive Director Bradley Kuhn took part in a recent conference call held by the Broadcast Protection Discussion Group; here are his notes from the conversation. "I spoke for the FSF, stating that: (a) BPDG's recommendation would retroactively declare existing Free Software as "Covered Products", and (b) since we cannot, as a matter of ethics, add features to such Products that 'frustrate user modifications', we are at a complete impasse. BPDG must take seriously the concerns of Free Software."
RealizationEngine 1.0 Released to Open Source Community
Realization Systems, Inc has released version 1.0 of their web-based RealizationEngine communication tool. "By employing a dual-licensing model, we will be able to offer this great project to most people at no charge, but still allow companies to build proprietary products on our code if they choose to purchase a non-GPL License."
Oracle delivers 'Unbreakable Linux'
Here is Oracle's press release on the availability of Oracle9i for Linux. "The release includes new high availability, business intelligence and XML features, as well as numerous manageability improvements. Oracle's unique approach to database clustering in Oracle9i Database has enabled enterprise customers to reduce the cost of deploying and managing the database." This is the product the company is calling "unbreakable Linux," which will always prove to be a hard claim to live up to.
See also the joint press release from Oracle, Red Hat, and Dell on their collective commitment to the Linux platform, and this one from Oracle and Red Hat on how the two have worked to improve the Red Hat Advanced Server product.
German government moves to IBM Linux
The German government announced that it will be working with IBM to move a number of its government agencies to the Linux platform.Sherwin-Williams to deploy Linux in 2500 stores
Sherwin-Williams (the largest U.S. paint retailer) has announced that it has contracted with IBM to deploy 9700 Linux systems in its 2500 stores. The systems will run paint tinting and color matching applications, as well as the occasional "manager's workstation." They will be running Turbolinux.PHP: most popular server-side Web scripting technology
Zend Technologies Ltd. announced that as of April 2002, PHP, the open-source software phenomenon, has surpassed Microsoft's ASP as the most popular server-side Web scripting technology on the Internet.Zend issues new rev of Studio, PHP Development tool
Zend has issued a new release of the PHP development package, Studio 2.5. "Highlights of the new release include a new customization user interface, class browsers for projects and files, variable code completion, bracket matching, integrated function documentation engine and new 'smart' installer."
Opera Gives Back to the Community
Opera Software unveiled its new Global Donations Program, giving registered versions of Opera away for free to organizations for the physically challenged, schools grades kindergarten through the 12th grade, as well as Web designer schools or individual programs.Mandrakesoft Increases Revenue, offers more stock
MandrakeSoft has put out a release describing its recent financial performance: for the six months ending in March the company lost EUR 3.7 on revenue of EUR 2.33. Also announced is a new stock offering; existing shareholders have the first chance to buy more shares from the company. There is a registry for those who do not currently own shares, but who would like to participate in the new offering. If all the new shares are bought, the outstanding shares of MandrakeSoft will increase 33% to 5.1 million, and the company will raise about EUR 3.6 million.Caldera reports second quarter results
Caldera International has announced its second quarter results. The company lost $6.6 million on $15.5 million in revenue over the quarter.The May 2002 Netcraft Web Server Survey
The May, 2002 Netcraft Web Server Survey has been published, check it out for the latest web server usage statistics.Linux Stock Index for May 31 to June 04, 2002
LSI at closing on May 31, 2002 ... 24.30LSI at closing on June 04, 2002 ... 23.96
The high for the week was 24.30
The low for the week was 23.56
Press Releases
Open Source Announcements
- Mozilla.org (MOUNTAIN VIEW, Calif.): Mozilla.org Launches Mozilla 1.0; Open Source Browser Suite Powered by Gecko Enables Developers To Create Standards-Based Web Applications and Devices.
- Open Cascade (PARIS): Approval of SALOME 2 Project Reflects Growing Industrial Interest in an Open-source Framework to Integrate CAD and Finite Elements.
- Openwave Systems Inc. (REDWOOD CITY, Calif.): Openwave Contributes Open Usability Interface to Open Source Community.
- Sleepycat Software, Inc. (LINCOLN, Mass.): Sleepycat Software Announces Development of First Embedded, Industrial Strength XML Database Engine.
- Tech Soft America (OAKLAND, Calif.): Newest HSF Specification Announced by the OpenHSF Initiative; New Geometric Primitives, Extensions for On-Demand Streaming Now Supported.
Distributions and Bundled Products
Software for Linux
- Co-Design Automation (LOS ALTOS, Calif.): Co-Design Systemsim 2.0 Adds Advanced SUPERLOG Verification for Designers, SystemVerilog Modeling.
- DataCore (FT. LAUDERDALE, Fla.): DataCore Showcases Customer Wins Built on Industry-Leading Brocade Storage Networking Infrastructure.
- Dot Hill Systems (CARLSBAD, Calif.): Dot Hill Achieves Certification in Linux NetworX's Oracle-Based Cluster.
- Gobe Software (PORTLAND, OR): gobeProductive Linux Preview.
- HP (PALO ALTO, Calif.): HP Announces Toolkits Supporting Development of Internet-enabled Printing Services.
- IDELIX Software (VANCOUVER, BC): IDELIX Releases Version 2.0 of the Pliable Display Technology (PDT) Software Development Kit; SDK V2.0 Now Featuring Increased PDT Functionality and Broader Platform Support .
- IDT (SANTA CLARA, Calif.): IDT and Jungo Provide Development Platform; For Wireless LAN and SOHO Routers.
- Interlink Networks (ANN ARBOR, Mich.): Interlink Networks Adds E-Commerce Distribution Partners; Company Expands Channels for its Award-Winning RADIUS Authentication Software.
- Intoto Inc. (SAN JOSE, Calif.): BRECIS and Intoto Announce the Availability of a Comprehensive Integrated Platform for Security Appliances.
- Kivera (OAKLAND, Calif.): Kivera Helps Wireless Carriers Maximize E911 Compliance With Launch of Kivera Location Engine 2.2.
- Lineo (SALT LAKE CITY): New Release of Embedix SDK Delivers Flexible Tool Chain For End-to-End Embedded Linux Development.
- LISATek (MENLO PARK, Calif.): LISATek Announces New Release of Its Unified Product Suite for Next-Generation Embedded Processor Design; New Tool Suite Integrated with Synopsys CoCentric System Studio.
- MBSI and Conexant Systems Inc.: Introducing the Linux drivers for Conexant modem chipsets project.
- Misys Healthcare Systems (TUCSON, AZ): Misys Healthcare Systems Announces Misys Instrument Manager.
- Obsidian (AUSTIN, Texas): Obsidian Software Announces RAVEN SE For MIPS32; Random Test Generator For Soft Cores.
- Oracle Corporation (REDWOOD SHORES, Calif.): Oracle Delivers 'Unbreakable Linux' - Low Cost Linux Clusters.
- Pingtel (ATLANTA and WOBURN, Mass.): Pingtel Introduces SIPxchange IP Voice System; First SIP-based IP PBX For Enterprise Customers.
- Real Intent (SAN JOSE, Calif.): Real Intent Adds Formal Clock Intent Verification to Verix; Formal Verification Assures Reliable Data Transfer Between Clock Domains.
- Samsung (Reading, UK): Samsung Contact 'Download and Go!' Provides Linux Users With Powerful, Low Cost Alternative E-mail .
- SSH Communications Security (ATLANTA): SSH Announces Internet Security Solution Optimized for Network Edge and Network Access Devices.
- Synplicity, Inc. (SUNNYVALE, Calif.): Synplicity's Synplify ASIC Synthesis Software Supported by IBM ASIC Design Flow.
- Tech Soft America (Oakland, CA and Marlborough, MA): HOOPS® 3D Application Framework from Tech Soft Powers New CADKEY Workshop Version 20.
- Telrad Connegy (ATLANTA): Telrad Connegy Announces IP Telecommunication Products for US Enterprise Market; Advanced VoIP Products Expand Company's Traditional Enterprise Offerings.
- ThinSoft (USA) Inc (EMERYVILLE, Calif.): Fortune 500 Companies and Small to Medium Enterprises are Signing Up for ThinSoft's WinConnect.
- TransEDA (LOS GATOS, Calif.): TransEDA Enables Property Driven Verification Methodology With New Release of its VN-Property DX Dynamic Property Checker.
- Ulead Systems (TORRANCE, Calif.): Ulead Empowers Enterprises With Server-Based Image Editing and Photo Sharing Software; iMira Album and iMira Editing Free Organizations to Internally Manage Their Imaging Services.
- Ulticom, Inc. (ATLANTA): Ulticom and IBM Demonstrate Signalware Software On Linux Servers; Supercomm 2002 Exhibit Features the Enabling of SIP - SS7 Inter-Working.
- VA Software (FREMONT, Calif.): VA Software Ships SourceForge Enterprise Edition 3.1.
- XCELERIX (INDIANAPOLIS): Xcelerix Pioneers Next-Generation Embedded In-Memory Database.
Products and Services Using Linux
- Linux NetworX (SALT LAKE CITY): Linux NetworX's Oracle-Certified Linux Cluster Delivers Always-On Database.
- Rackspace Managed Hosting: Rackspace automates virtual hosting.
- Tekelec (MORRISVILLE, N.C.): Tekelec Announces Advanced Signaling Architecture - TekWare.
- Terix Computer Company, Inc. (SANTA CLARA, Calif.): Terix Announces Linux Support as Sun Expands Systems Offerings.
- Toshiba America Information Systems Inc. (IRVINE, Calif.): Toshiba Powers the Mobile Office With New Wireless Mobility Server; Toshiba's Compact Magnia SG20 Provides Portable Networking.
- TransDimension (IRVINE, Calif.): TransDimension Announces Successful Interoperability Testing of Industry's First Single-Chip, Dual-Role On-The-Go Controller.
Hardware with Linux support
- AMD (TAIPEI, Taiwan): AMD Serves Up Four-Way Multiprocessing Demo At Computex Taipei 2002.
- HP (PALO ALTO, Calif.): HP Introduces Powerful, High-density Server and Supercomputer; More Than 1,000 New AlphaServer Systems Already Sold.
- HP (PALO ALTO, Calif.): HP Introduces Blade Server Chassis and Enhancements for Telecommunications Industry.
- Infineon Technologies (ATLANTA, GA): Infineon Technologies Announces First 64-bit Communications Processor for Network Edge Access Devices.
- OmniCluster Technologies (Boca Raton, Florida): Plug n Play Security Blade Appliance.
- Pace Micro Technology (BOCA RATON, Fla.): Pace Ships IP500 Home Gateways to Technology Partners; Leading Developers and Suppliers of TV over IP Products to Begin Interoperability Testing and Software Integration.
- Philips (SAN JOSE, Calif.): Philips Delivers One of the First USB On-The-Go System Developers Kits.
- StarGen (MARLBOROUGH, Mass.): StarGen Announces SFS2100 StarFabric Switch Card For PICMIG 2.17 Platforms.
- Tvia (SANTA CLARA, Calif.): Tvia Introduces New Multi-Media Display Processor At Computex Taipei 2002; CyberPro 5600 is Tvia's Second New Processor for 2002.
- Wincor Nixdorf (AUSTIN, Texas): Wincor Nixdorf Announces Low-Cost Migration Strategy to Powered USB Technology on BEETLE POS Family.
Cross Platform/Porting Product
- Miraplacid: Miraplacid Scripting Components for Linux.
Linux at Work
- Dell (AUSTIN, Texas): Customers Worldwide Choose Dell for High-Performance Computing Clusters.
- HP, DreamWorks (PALO ALTO & GLENDALE, Calif.): HP Helps DreamWorks Create ''Spirit: Stallion of the Cimarron''.
- LynuxWorks (SAN JOSE, Calif.): Royal Danish Navy Selects LynxOS 4.0; Ability to Run Linux Applications Unmodified Seals the Deal for LynxOS RTOS.
Java Products
- Borland (SCOTTS VALLEY, Calif.): Borland JBuilder 7 Now Shipping.
- NewMonics, Inc. (LISLE, Ill.): NewMonics Releases the First Carrier-class Java Virtual Machine; PERC 3.3 Delivers On Reliablility, Determinism, and Performance for Mission-Critical Applications.
- Rococo Software (DUBLIN, Ireland): Rococo Software Releases Bluetooth Simulator With J2ME Support.
- Rococo Software (Dublin, Ireland): Rococo Software Launches Bluetooth Developer Kit Beta Program.
Books and Documentation
- O'Reilly (Sebastopol, CA): "Managing & Using MySQL, Second Edition" Released by O'Reilly.
Partnerships
- Caldera, Conectiva, SuSE, Turbolinux (LINDON, Utah, CURITIBA, Brazil, NUREMBERG, Germany, & BRISBANE, Calif.): Caldera, Conectiva, SuSE, Turbolinux Partner To Create UnitedLinux, And Produce A Uniform Version Of Linux For Business.
- ComplementSoft and Decision Intelligence (CHICAGO & MINNEAPOLIS): ComplementSoft and Decision Intelligence Announce Development & Marketing Alliance For Data Mining Modeling Templates.
- Computer Associates International, Inc. (ISLANDIA, N.Y.): CA Announces Support for UnitedLinux Across Portfolio of eBusiness Management Solutions.
- Mainline Information Systems: SuSE Linux and Mainline To Deliver Solutions for IBM eServers.
- Rogue Wave Software, Inc. (BOULDER, Colo.): Rogue Wave Software Selected by Red Hat to Join ISV Premier Partner Program.
- VMware, Inc. (PALO ALTO, Calif.): HP Teams with VMware to Deliver Enterprise Server Consolidation Solutions for HP ProLiant Servers.
Financial Results
- HP (PALO ALTO, Calif.): Pre-merger Compaq Reaps Significant Gains Overseas in Storage Market Share; Retains the No. 1 Storage Position in 2001 According to Analyst Firm.
- GraphOn Corporation (BELLEVUE, Wash.): GraphOn Announces Transfer of Stock Listing to Nasdaq SmallCap Market.
- LynuxWorks (SAN JOSE, Calif.): LynuxWorks Reports Positive Cash Flow and Sequential Quarterly Growth; LynuxWorks Raises $4 Million in Bridge Funding.
Personnel and New Offices
- Hats Off Communications (WILMINGTON, Vt.): Former Red Hat Marketers Team Up to Form Hats Off Communications; Announce First New Clients.
Miscellaneous
- Alexis de Tocqueville Institution (WASHINGTON): Open Source Software May Offer Target for Terrorists, According to Study by Alexis de Tocqueville Institution's Committee for the Common Defense.
- LinuxWorld Conference & Expo (FRAMINGHAM, Mass.): LinuxWorld San Francisco to Celebrate the 'Linux Masters'; New Program Rewards Returning Conference Alumni.
- LinuxWorld Conference & Expo (FRAMINGHAM, Mass.): LinuxWorld Attendees to Tour 'Around the World' With Linux; On-Floor Presentations Will Showcase How Linux and Open Source Makes a Difference Internationally.
- Neoware Systems (KING OF PRUSSIA, Pa.): Neoware Demonstrates the Latest in Thin Client Appliances and Software at Citrix iForum in Edinburgh; Neoware Software for IBM NetVista Thin Clients on Display.
- ScanSoft Inc. (MUNICH, Germany): ScanSoft to Showcase Speech Technologies for Desktop and Embedded Platforms at Premier Intel Event.
- Speak with a Geek (SAN DIEGO): Speak with A Geek Named to Jupiter Media Metrix With Half-Million Visitors in First Month of Operation.
- The Open Group (SAN FRANCISCO): The Open Group Announces ''All-User'' Web Services Conference.
- Jabber, Inc. (DENVER): Jabber European Conference Attracts Leading Companies.
Page editor: Rebecca Sobol
Linux in the news
Recommended Reading
How Linux will Revolutionize the Embedded Market (LinuxDevices)
Here's a column by Michael Tiemann on LinuxDevices.com about how the embedded Linux market will settle out. "In the mean time, the deeper I look into environments adopting Linux, from embedded to enterprise, the more I believe that Linux has the requisite DNA and development model to truly scale from embedded to enterprise as a single platform, and Red Hat's focus will remain on ensuring that what works for the mainframe, and the server, and the workstation, also works for the appliance, the carrier, the router, the PDA, and the cellphone; and, of course, vice-versa."
Processors: The next commodity? (ZDNet)
David Berlind suggests that processor power could become a tradeable commodity on the Internet. "Will the processor turn virtual and will MIPS ever become a commodity like electricity? Probably. But it may take a while. Current prototypes suggest that the first commercial grids will have some dependencies. For example, there will be Linux grids that are only good for Linux-based applications and they may only be able to run applications designed for a specific processor architecture like IA-64 or IA-32."
Open-Source Fight Flares At Pentagon (Washington Post)
The Washington Post reports on Microsoft's efforts to head off open source software use in the U.S. Military. "But the effort may have backfired. A May 10 report prepared for the Defense Department concluded that open source often results in more secure, less expensive applications and that, if anything, its use should be expanded."
Obsolete Microkernel Dooms Mac OS X to Lag Linux in Performance (Linux Journal)
Here's a detailed, technical, and opinionated article in the Linux Journal on the superiority of Linux's monolithic kernel architecture. "Given how the microkernel experiment has worked out, I'm surprised by Apple's quaint choice to use a microkernel in a new design. At the very least, it creates an opportunity for Linux to establish and maintain performance leadership on the macppc platform."
Companies
Hanging onto the desktop, barely (ZDNet)
ZDNet looks at the battle between Microsoft and Sun for the corporate desktop. "It is not the alternative systems like Linux that pose such a threat to Microsoft's desktop hegemony. It is the crossover applications (Java, Open Office, Mozilla, and The Gimp) that could give Chairman Bill a bad hair day he might never get over."
CodeWeavers and NeTraverse Bring Office to Linux (OpenForBusiness)
Open For Business reviews CrossOver and Win4Lin. "The folks over at CodeWeavers are nothing short of geniuses - they have succeeded in making it a snap to install and operate Microsoft Office in Linux."
Sony ships PS2-Linux PC conversion kit (ZDNet)
ZDNet reports on Sony's release of a Linux kit for its PlayStation 2 platform. "Sony Computer Entertainment has begun shipping a kit for turning the PlayStation 2 into a Linux console, bowing to the requests of thousands of open-source programmers. The kit is available in the United States and Europe."
Linux for Playstation comes to UK (BBC)
According to this article in the BBC News, Sony has started taking UK orders for a kit to turn the Playstation 2 games console into a computer running the Linux operating system. (Thanks to Jim Jarvie)IBM boosts Linux for oil industry (News.com)
IBM and Landmark Graphics will be building Linux supercomputers and PCs for oil and gas companies, according to this News.com article.IBM snags 'Lord of the Rings' deal (ZDNet)
ZDNet reports on IBM's sale of 150 workstations to Weta, a New Zealand-based film company. "The deal underscores IBM's recent push into digital effects as it and other technology giants try to capitalize on studios' move to embrace the Linux operating system, which has been promoted for its cost savings and flexibility."
Sun's StarOffice no longer free (ZDNet)
Here's a ZDNet article on the (May 29) end to free downloads of StarOffice 5.2. "Sun's maneuvres with StarOffice are being closely watched as open-source software businesses continue to search for ways to boost revenues. Paid, proprietary software is controversial in the open-source world, which is based on the theory that profits can be made on 'free' products, but some open-source companies say it is the only way to continue to fund themselves."
Sun to launch new low-end servers (News.com)
Sun Microsystems will launch two new low-end servers, according to this News.com article. "If you can't beat 'em, join 'em," Sun decided, announcing plans to sell low-end servers with Intel or Intel-compatible processors and the Linux operating system. It's better to cannibalize one's own sales than to lose them to other companies, the Santa Clara, Calif.-based company reasoned.Red Hat banding for compatibility (News.com)
News.com reports on Red Hat's Alliance program, which is intended to improve compatibility among products from different vendors. "The partners include BMC Software, Borland Software, Computer Associates International, IBM and Veritas Software."Unified Linux effort won't faze Red Hat (News.com)
Here's News.com's take on UnitedLinux. "UnitedLinux pools some resources while giving much of the technological control to SuSE--a recognition of the reality that SuSE was the only Linux seller that had a development staff with depth comparable to Red Hat's."Red Hat might face a new Goliath in 'United Linux' (NewsForge)
NewsForge reports on the upcoming announcement from Caldera, Conectiva, SuSE, and Turbolinux. "The United Linux announcement is marketing at it's most excellent: giving the public what they want. It's business strategy at its finest: Let's find out what makes Red Hat so successful and imitate it. They're nosing in on Red Hat's territory by invading and taking over the paradigm."Red Hat Co-founder Works on Next Venture (Raleigh, N.C. News & Observer)
In case you've been wondering what Red Hat co-founder Bob Young has been up to since he left his active Red Hat days behind, here's a story from The News & Observer (Raleigh, N.C.) about Bob's latest venture. "Lulu Enterprises -- Young takes the name from the 1930s definition of "lulu" as a remarkable thing, person or idea -- is the parent company of Lulu Press, which acquired some assets from the now-defunct OpenMind Publishing Group of Cary. Lulu Press is still in the formative stages."
Business
Paint retailer brushes up on Linux (News.com)
News.com covers the move of Sherwin-Williams from SCO Unix to Linux. "Sherwin-Williams will use the PCs in more than 2,500 stores for running each store's centralized cash register software, reading e-mail and browsing the company's intranet, and for securely recording customers' choices in custom paint tints."
Linux gets big in Christchurch (ComputerWorld)
ComputerWorld in New Zealand looks at local businesses that are using Linux. "The firm is now conducting policy routing between its ADSL and dedicated data connections, its proxy services, intrusion detection, mail gateways and traffic shaping, all using standard Linux utilities." (Thanks to Ross Boswell)
The Business of Embedded Linux (LinuxDevices)
In this opinion column at LinuxDevices.com, Steven J. Vaughan-Nichols offers a perspective on the business side of the Embedded Linux Market. Vaughan-Nichols sees 'consolidation' in his crystal ball.Linux players bond for business software (News.com)
Here is another article on News.com about UnitedLinux. "However, the lack of participation by Red Hat in the UnitedLinux alliance is a problem, analysts said. UnitedLinux is redundant to the Linux Standard Base specification backed by Red Hat, according to IDC analyst Dan Kusnetzky."
Linux United - an operating system grows up (IT-Director)
IT-Director writes about Linux United. "If the announcement rolls out as everyone expects there will be five major Linux distributions - Red Hat, Mandrake, Debian, Slackware and 'Linux United'"
Four Linux Vendors Launch 'UnitedLinux,' Others May Join Soon (Open For Business)
Open For Business looks at UnitedLinux. "In a brief correspondence with Mandrake co-founder Gaël Duval yesterday, he confirmed that MandrakeSoft was in talks with the UnitedLinux group. He noted that there were many factors that his company was considering, delaying any immediate decision by Mandrake on whether to join."
Commentary: Where UnitedLinux got it wrong (NewsForge)
NewsForge points out a problem with the UnitedLinux "no free binaries" policy. "No, many of the people downloading software from FTP sites are developers. They are the software providers -- the true software vendors, if you will -- who make the code which is UnitedLinux. By cutting off your development people, you are launching into dangerous territory. Alienating the Open Source community is a dumb move for most companies to make. But alienating them, and then expecting them to cooperate with your desire to sell their software, is profoundly foolish." The solution, they say, is to name the FTPable binary distribution "Hackers Linux."
Together We Get It Together (DesktopLinux)
Here's another view of United Linux, this time from DesktopLinux.com. "IBM plans to support UnitedLinux across its entire range of hardware, according to Scott Handy of IBM Worldwide. "Since UL supports ten languages, it's easier to build and deploy. We will also support Red Hat.""
Linux Dreamworks Redux (Linux Journal)
Linux Journal takes us back to the DreamWorks SKG Glendale studio, to see how Linux was used in the production of Spirit, Stallion of the Cimarron. ""For Spirit the Ink and Paint department was entirely Linux, as was half of rendering", says DreamWorks Head of Animation Technology Ed Leonard. "Now all the departments have been converted. For our current production, Sinbad, every workstation and the entire renderfarm is Linux." Linux gained its first toehold in the motion picture industry on servers for rendering and has now become a standard desktop for artists. For Spirit DreamWorks utilized more than 150 Linux desktops. More than 350 are in use for Sinbad."
Linux in the German government
The German government's plans for using Linux are covered by these articles on News.com and IT-Director.German gov deal offers Linux great leap forward in Europe (Register)
The Register covers the announcement of a Linux-based cooperation agreement between IBM and Germany's ministry of the Interior. "The agreement also calls for IBM and the German government to create "innovative and reusable IT solutions for the federal administration," while IBM will be setting up an open source portal and providing support services."
Linux takes on Microsoft turf in Germany (ZDNet)
ZDNet looks at the purchasing deal signed by the German government, IBM, and SuSE. "With the contract with IBM we meet three key targets,' Otto Schily, Minister of the Interior of the Federal Republic of Germany, said in a statement. 'We raise the level of IT security by avoiding monocultures; we lower the dependency on single software vendors; and we reach costs savings in software and operation costs.'"
(German) Federal Government to increase Linux use (Heise)
Here's an article (in German) on Heise Online about the German government's increased interest in using Linux. Avoidance of "manufacturer dependence" and increased security are cited. An English translation is available Via Google. (Thanks to Dan Kegel).The Penguin Continues Its March (Wired)
Wired looks at increasing Linux usage in government systems. "Overseas, Linux systems help keep order in Germany's parliament as well as China's post office, France's culture, defense and education ministries and other federal agencies in Europe and Asia."
Open Road For Open Source (TechWeb)
TechWeb takes a look at the growth of open source software. "It also has Microsoft worried. The company is trying to convince the Pentagon that open source is dangerous, suggesting that its use could jeopardize critical defense systems. (Interesting argument, coming from a vendor that has had more than its share of security problems.)"
Taiwan gets behind open source (News.com)
News.com reports that the Taiwanese government plans to start an open-source project. "An official with the National Center for High Performance Computing, Chuang Tze-nan, announced the plan Monday. Under the project, the government will encourage research and development in office software and the opening of the source code for government agencies and private establishments."
Global server market shrinks 15 percent (News.com)
News.com is carrying a Reuters article stating that the market for servers dropped 15% in the first quarter. The news is not all bad, though: "Sales of servers running Linux, the upstart operating system developed by engineers worldwide, jumped 54.7 percent from a year earlier to just under $400 million, with IBM leading the pack."
Microsoft gets diplomatic in China (News.com)
News.com looks at Microsoft's challenges in China. "Still, the company must contend with the realities of the market in China. Linux is catching on here. Earlier this year, the Asia-Pacific wing of research firm Gartner said 15 percent of companies in the region--excluding Japan--used Linux in the fourth quarter of 2001, up from between 5 percent and 7 percent a year earlier."
Interviews
Linux Orbit interviews Murray Cumming
Linux Orbit has an interview with Murray Cumming. "I sat down with Murray Cumming, lead developer on the gtkmm and gnomemm C++ bindings for GTK+ and GNOME to get some information on the status of C++ development in GNOME."
An Interview with Dr. Edgar Villanueva (Linux Journal)
Linux Journal interviews Dr. Edgar Villanueva on the topic of free software in Peru. "Dr. Edgar Villanueva has recently become somewhat of a celebrity in the Free Software and Open Source communities as a result of his legislative efforts favoring free software and his highly publicized, well informed and eloquent response to a Peruvian Microsoft executive's letter."
People Behind KDE: Jason Katz-Brown and Masaji Takeyama
KDE.News has interviews available with Jason Katz-Brown who recently enriched KDE CVS with Kolf, and with Masaji Takeyama who brings KDE to the masses in Japan.Interview of Paul F. Dubois of Numeric Python Fame
Get ready for the European Python and Zope Conference 2002 with a series of interviews with conference speakers. Here's the first one, with Paul F. Dubois."
I think open-source science is taking off. If I am right and correctness is more precious to us than to banks, the correctness advantages of open source are important. I will talk about some key ideas for constructing open-source scientific programs, including the issue of how to make reusable components."
Interview: Paul F. Dubois of Numeric Python Fame
Get ready for the European Python and Zope Conference 2002 with a series of interviews with conference speakers. Here's the first one, with Paul F. Dubois. "I think open-source science is taking off. If I am right and correctness is more precious to us than to banks, the correctness advantages of open source are important. I will talk about some key ideas for constructing open-source scientific programs, including the issue of how to make reusable components."
Natural Curiosity: Dr. Mitra and the Hole in the Wall Experiment (Linux Journal)
Linux Journal has received an invitation for LJ readers to help interview Dr. Mitra about sustainable development and Linux.
Resources
Visual Development with Qt 3.0 (Linux Journal)
Boudewijn looks at Qt 3.0 and talks about why its such a strong and useful visual design environment.Update on Linux compatible Single-Board Computers (LinuxDevices)
LinuxDevices.com is running a survey of Linux-friendly single-board computers. "With the growing availability of application-oriented system-on-chip processors, SBC vendors are beginning to target their boards at specific applications or classes of applications. For example, there are boards with two or more Ethernet ports that are intended for firewall/router uses or small palm-sized boards with built-in LCD controllers and touch input controllers for specialized handheld computer apps."
Embedded Linux Newsletter
The May 30, 2002 Linux Devices Embedded Linux Newsletter is out. Topics include the business of embedded linux, the Dragonix Linux SBC, BOEL part 2, unification by Linux vendors, and more.Embedded Linux Newsletter for May 23, 2002 (Linux Devices)
The Linux Devices Embedded Linux Newsletter for May 23, 2002 features a guest editor by Red Hat CTO Michael Tiemann, an interview with ELC chair Mark Brown, and lots more on the topic of embedded Linux.What is Ogg Vorbis?
The Ogg Vorbis site has posted an introductory document that describes the Ogg Vorbis audio compression system.Open Source Software Image Map
The National Imagery and Mapping Agency's National Technical Alliance has produced some reports on the benefits of open-source software development....a survey of relevant open source software packages was performed. Demonstrations were provided on an acquired workstation. The objective was to determine how Open Source Software technology and methodology could be applied to meet government requirements. The effort demonstrated the technological advantages of Open Source Software while highlighting several organizational challenges.Thanks to David Wheeler.
Is Beauty Only Pixel Deep?, Part 1 (Linux Journal)
The Linux Journal talks about management of X11 fonts in this "how to" article. "The real problem with fonts under Linux (under X actually) is the many different ways of handling fonts, not to mention different font types. We have both bitmap and outline fonts; which further break down into Speedo fonts, portable compiled fonts, Type1, TrueType, ghostscript fonts and others. This is one place where 'more than one way to do it' hasn't paid off."
A TimeSys perspective on the Linux preemptible kernel (LinuxDevices)
LinuxDevices.com is running a whitepaper by Dr. Doug Locke, Vice President of Technology at TimeSys Corp. Dr. Locke explores the changes recently made to the mainstream Linux development kernel to improve its preemptibility, discusses the implications of these changes relative to embedded and real-time applications, and contrasts the recently adopted approach with that used in TimeSys Linux GPL.Asterisk -- punctuating the path to open source Packet Voice (LinuxDevices)
LinuxDevices.com has a whitepaper on the Asterisk Private Branch Exchange (PBX). "The Asterisk Private Branch Exchange (PBX) and Interactive Voice Response (IVR) platform offers an exciting look at the power and adaptability of the Linux kernel and GNU system. Asterisk turns a GNU/Linux system to the task of switching calls, and offers a large number of features to support communication in the business environment."
Reviews
Breaking the Ice: IceWM Review (LinuxOrbit)
LinuxOrbit reviews the IceWM window manager. "To start with, IceWM is very easy on system resources. If you've only used KDE or Gnome, then a switch to IceWM on your desktop will seem like a major computer upgrade."
Netscape 7.0 Available As Preview Release (TechWeb)
Internet Week reviews Netscape 7.0 preview release 1. "The Mozilla browser code base, available in nearly complete open-source form for a while now, this week sees light of day for the first time as an official 'preview release' from America Online's Netscape division."
Packet Design unveils Layer 3 switch (InfoWorld)
InfoWorld looks at Route Explorer, a new network appliance from Packet Design. "Within the appliance is an open-source mySQL database running on a Linux operating system. Standard with 20GB of disk space, Route Explorer records as many as 4 months of commands issued over OSPF and IS-IS protocols. Estrin says future releases of the product will also listen to BGP." (Thanks to Lenz Grimmer)
Netscape 7 beta: first looks (Register)
The Register reviews Netscape 7 beta. "Netscape 7.0 Preview Release, which is based on the recent Mozilla 1.0 RC2 build and the Gecko browser engine, features a variety of enhancements on Netscape 6.2. These include tabbed browsing (a la Opera), print preview, the ability to save complete web pages, email return receipts, message labels and S/MIME support. A quick Search within mail and address book, filtering facility and mail alerts, has also been included."
BRU-Pro 2.0: A Product Review (Linux Journal)
Here's a positive review of BRU-Pro 2.0, backup software for Linux, from Linux Journal. "BRU's biggest selling point, besides price, is down in the dirt of how it does backups. The philosophy BRU's creators took was that your backups are only as good as the data on them. It is easy to assume that since you backed something up, your data is safe; unfortunately, that is not always the case. Therefore, the creators designed BRU to provide accountability for every bit of data of every buffer block, local or remote."
Book review: Craig Hollabaugh's Embedded Linux (LinuxDevices)
LinuxDevices.com is carrying a lengthy review of Embedded Linux by Craig Hollabaugh. "Don't let my quibbling with details in Embedded Linux mislead you -- this is an extraordinarily worthwhile book that anyone working with Linux in embedded systems should have."
Cisco $15,000 'blade' is really a PC (Inquirer)
The Inquirer talks with an engineer who opened up the Cisco "Network Access Module" for its 6500 switch. "The card, he claims, is running a Linux kernel and has a number of GPL tools included such as syslogd klogd crond mingetty agetty ps & top. 'If you have access to CCO and download updated software for the NAM you find that it is basically a gziped disk image of a Linux System complete with Lilo and a number of FSF foundation utilities (strings imagefile | grep Foundation)'".
Meet Dragonix (LinuxDevices)
The latest hardware profile from LinuxDevices.com is about "Dragonix." "What's Dragonix? It's an 'Open Hardware' single-board computer (SBC), based on a Motorola Dragonball 68VZ328 processor, running uClinux." Pictures included.
FYI: Introducing Dillo, a lightweight embeddable browser
Linux Devices has published a white paper on Dillo, a small web browser that is suitable for use in embedded systems.It came from Boston U. (News.com)
This News.com article looks at Boston University's Scientific Computing and Visualization Group - Deep Vision Display Wall and the supercomputer that powers it. "A cluster of 52 dual-processor IBM X330 Linux servers renders and manipulates the images, while 24 workstations serve to direct eight projectors, which create the image. Each of the eight NEC liquid-crystal display (LCD) projectors costs about $4,500. In all, this extra equipment costs about $300,000."
Miscellaneous
Experts warn of Linux/Windows virus (vnunet)
Much fuss is being made about the new "Simile" virus which, it is said, can infect both Windows and Linux systems. This vnunet article at least has captured an important point: "Linux users can even sit back smugly and consider themselves secure, as long as they do not log in as root and run dodgy email attachments." Very few Linux users, of course, would do such a thing...
Linux development kernel gets Bluetooth (ZDNet)
Support for Bluetooth has been added to the Linux development kernel, reports ZDNet. "On 8 May the Linux Bluetooth protocol stack made its debut in version 2.5.14 of the Linux development kernel, in its first non-experimental form."
Trial: Microsoft memo disallowed (ZDNet)
This article from Reuters reports on the rejection of a controversial memo as evidence. "In the memo, Microsoft Senior Vice President Joachim Kempin complained to Gates and other senior executives that computer chipmaker Intel was encouraging computer makers to support the rival Linux operating system and funding development of new devices that would work with Linux.
Kempin said Microsoft should withhold technical information from Intel and "work underground" to promote its competitors in the computer chip industry, according to portions of the memo disclosed
in the states' legal filing.
"
Open Source Software May Offer Target for Terrorists
According to this press release, open-source software makes terrorism easy."Opening the Open Source Debate", a soon to be released white paper by Alexis de Tocqueville Institution details the complex issues surrounding open source, particularly if federal agencies such as the Department of Defense or the Federal Aviation Administration use software that inherently requires that its blueprints, source code and architecture is made widely available to any person interested - without discretion.
Microsoft fails to win over the Pentagon (vnunet)
Vnunet reports on an attempt by Microsoft to get the Pentagon to dump its move to open source. "Among the most high-profile efforts is research funded by the National Security Agency to develop a more secure version of the open source Linux operating system..."
Microsoft Finds Upgrade Plan A Tough Sell (TechWeb)
TechWeb examines the slow movement of Microsoft customers to the company's new licensing program.But some users may be holding out so they have the freedom to use alternatives. Microsoft's attempt could backfire. "Everyone's now thinking that Linux is the next best thing, because we're trying to figure out how to best manage the nickels we have left," Lindahl says. "Does Microsoft realize that?"
Microsoft Shills on the Attack, Again (OOoDocs)
The Open Office Documentation Project is running a commentary on the latest Gartner pronouncements. "The Gartner arguments are shallow and spurious, as if from another age, another time. What plantation are they talking about anyway? All of which causes any sane person to ask not about Open Office.org, but rather, "What's up with Gartner?"" (Thanks to Martijn Dekkers)
From Junkie to, Well, Junkman (Wired)
Wired takes a look at James Burgett, a man who is building a trash empire from recycled computers. "All the machines are loaded with SuSe's version of the free Linux operating system. It takes too long to load Linux via the CD drive, so Burgett hooks each machine onto a network to burn in the operating system."
Page editor: Forrest Cook
Announcements
Resources
Linux man pages at LinuxQuestions.org
You can now view man pages online at LinuxQuestions.org in HTML, Plain Text, PostScript, or PDF.Linux Gazette #79 (June 2002) available
The Linux Gazette #79 is now available for your reading pleasure. In addition to the usual features there are articles on the Dillo web browser, Compiler design with Python, and much more.
Upcoming Events
GNOME2 and Evo Joint Bug Day
Help make Evolution and GNOME2 bug free. Join the GNOME2 and Evo Joint Bug Day next Thursday.Open Source Health Care Alliance call for participation (Linux Med News)
A call for participation has been sent out for the Open Source Health Care Alliance (OSHCA) meeting, which will be held in Los Angeles, CA during November.Boston GNOME Summit in July
The first bicentennial Boston GNOME Summit will be held in Boston July 18 - 20, 2002. This three-day hackfest is open to Foundation members only.LinuxTag 2002: KDE on Apple iBook and Sun UltraSPARC
The people from KDE will present a number of demonstrations at the LinuxTag conference in Karlsruhe, Germany. "UltraSPARC 60 with Sun Solaris and Apple iBook G4 PowerPC with Mac OS X -- these are amongst the diverse hardware and OS platforms on which KDE will be presenting its latest achievements to the world this week in Karlsruhe, Germany. Both installations will be running CUPS, to demonstrate how KDE Print can provide a great environment for an enterprise printing solution across different platforms."
LinuxWorld: 'Linux Around the World'
IDG World Expo announced that LinuxWorld Conference & Expo attendees will learn about the use of Linux and Open Source internationally in a new series of show floor presentations called "Linux Around the World."ActiveState Active Awards - Vote for your favorite (use Perl)
Use Perl has an announcement for the second annual Programmers' Choice and Activators' Choice Awards from ActiveState.Events: June 6 - August 1, 2002.
| Date | Event | Location |
|---|---|---|
| June 6, 2002 | Linux@work | Amsterdam |
| June 6 - 9, 2002 | LinuxTag 2002 | (Exhibition Center)Karlsruhe, Germany |
| June 6, 2002 | Embedded Systems Conference - Chicago | (Donald E. Stephens Convention Center)Rosemont, IL |
| June 9 - 14, 2002 | 2002 USENIX Annual Technical Conference | Monterey, CA |
| June 11, 2002 | Linux@work | Frankfurt |
| June 12, 2002 | Linux@work | Zurich |
| June 12 - 14, 2002 | JabberConf Europe 2002 | Munich, Germany |
| June 13, 2002 | Linux@work | Milan |
| June 18 - 21, 2002 | INET 2002 | (Crystal Gateway Marriott)Arlington, VA |
| June 20 - 21, 2002 | First International IFIP/ACM Working Conference on Component Deployment(CD 2002) | Berlin, Germany |
| June 25, 2002 July 23, 2002 | Seattle Ruby Brigade May Meeting | Seattle, Washington |
| June 26 - 28, 2002 | Embedded Systems Expo & Conference in Tokyo(ESEC) | (International Exhibition Center)Tokyo, Japan |
| June 26 - 28, 2002 | Yet Another Perl Conference(YAPC 2002) | (Washington University)Saint Louis, Missouri |
| June 26 - 28, 2002 | European Python and Zope Conference(EuroPython 2002) | (Charleroi Espace Meeting Européen)Charleroi, Belgium |
| June 26 - 29, 2002 | Ottawa Linux Symposium(OLS) | Ottawa, Canada |
| June 27 - 28, 2002 | European Tcl/Tk User Meeting | (Siemens Trainings Center)Munich, Germany |
| July 4 - 7, 2002 | UKUUG Linux Developers' Conference | (University of Bristol)Bristol, UK |
| July 5 - 7, 2002 | Debconf 2 | (York University)Toronto, Ontario |
| July 18 - 20, 2002 | Boston GNOME Summit | Boston, Mass. |
| July 22 - 26, 2002 | O'Reilly Open Source Convention | (Sheraton San Diego Hotel and Marina)San Diego, California |
| August 1 - 2, 2002 | 3rd annual Bioinformatics Open Source Conference(BOSC 2002) | Edmonton, Canada |
Miscellaneous
German Zope Users Group
A German Zope Users Group has been created, in German, of course. (Thanks to Holger von Ameln.)
Page editor: Forrest Cook
Letters to the editor
software and warranties
From: "Krishna E. Bera" <keb@cyblings.on.ca> To: lwn@lwn.net Subject: software and warranties Date: Fri, 24 May 2002 16:08:05 +0500 Re: http://www.lwn.net/2002/0523/ Under the Free Software model, software is not a product, it is a service. That is, Free Software creators are continuously and incrementally adapting the existing knowledge and code base for clients' needs. Therefore, the kind of liability laws used by lawyers and doctors would be applicable, rather than those used by consumer products. Closed source and proprietary software most closely resembles a black box product as you said. It's a more difficult question how open source proprietary software, such as Sun's Java, should be treated. Having the source and not being allowed to modify or release changes seems a lot like a "no user serviceable parts inside" kind of label, which implies manufacturer product liability. On the other hand, who is to blame when people follow instructions in, say, Chilton's Auto Repair guides and get hurt? Cheers, Krishna E. Bera Consultant, Cybling Systems Ottawa, Canada
Software liability
From: Duncan Simpson <dps@io.stargate.co.uk> To: letters@lwn.net Subject: Software liability Date: Thu, 30 May 2002 17:58:31 +0100 Surely the simplest solution for liability is simpler: if you sell the software you are liable and if not then you can hide behind a disclaimer. Any attempts to sell software and hide behind a disclaimer would be legally null and void or simply illegal, with stiff penalties for contravention. The latter would probably face significant restistance---at present claims that something sold is not subject to a warranty are just legally null and void. AFAIK nobody has tried to sue a softwrae manufatcurer on this basis yet, possibly becuase of the vast sums that would be required to avoid losing by default when a well funded vendor spins the process out as much as possible. This is in line with my understanding of existing consumer protection laws. It should be possible to claim that you are not selling the software if I can buy one copy, install and use it on an infinte nummber of machines and lend my copy to anybody else and allow them to do the same. I am sure RH, SuSe, etc could live with that kind of redsitributability and suspect the GPL requires them to allow this anyway (modulo the non-free items merely aggegrated on the same media). I suspect all the commercial software vendors could not accept these conditions and therefore be forced to sell their software and thereby be liable for it's security, and hopefully merchantability and so forth too. If problems do come to light then vendors should be able to rectify this by releasing a patch for no charge and notifying their customers, after which their liability for that particular problem would cease. This might make security patches avialable sooner because assuming that only 1% of your customers are affected and therefore the bug does not maytter would become unsafe. If that 1% might be able to sue you for $100 million+ actual damages you might not be willing to take that risk. -- Duncan (-: "software industry, the: unique industry where selling substandard goods is legal and you can charge extra for fixing the problems."
The war requires closed source?
From: James Crouchet <crouchet@sd.is.irs.gov> To: letters@lwn.net Subject: The war requires closed source? Date: Tue, 28 May 2002 11:16:46 -0500 Dear LWN, Reading through this week's front page I was struck by this pair of statements: "The national security of the United States, it would seem, is dependent on the continued security-through-obscurity of closed source code. Of course, there is no way, really, to know if that claim is true or not. The code is closed, so we will never know where the problems might be until somebody breaks it." What bothers me is that this accepts Microsoft's Big Lie(tm) to concentrate on the small lies. The big lie is that by hiding the source code one can hide the workings of a program. The truth is that, at best, this approach will deter those of small technical ability or who lack determination. For those with more savvy and determination the binaries themselves can be analyzed and disassembled. Perhaps even decomplied. While it would be daunting to consider such a process for all the code in Windows, that is also unnecessary. One need only target the specific parts one wishes to break. None of of these are new ideas. The only effective barrier that closed source builds is legal and foes such as crackers, foreign agents and terrorists care nothing about whether they might be violating Microsoft's copyright; they have already determined to violate much more serious laws. I urge you to keep Microsoft's claims in perspective and refuse to accept their Big Lies(tm) James Crouchet
GNU/LINUX and RMS
From: "Anand Srivastava" <Anand.Srivastava@ascom.ch> To: rms@gnu.org Subject: GNU/LINUX and RMS Date: Thu, 23 May 2002 09:42:32 +0200 Cc: letters@lwn.net Dear Mr. Stallman, Reading the letters at lwn today I realised, a basic problem with your request of calling Linux GNU/Linux. Linux is agnostic to the debate of free or commercial software. People developing Linux do not in general care about whether a software is free or not, as exemplified by the Bitkeeper case. If it works they will use it. But they are together in that they would use GPL license to develop their software because that protects their rights better. I believe that is the thinking of the majority of the Linux developers. So Linux will end up in free distributions as well as commercial distributions. In fact the only free distribution that I can think of is Debian, which already uses the GNU/Linux name. Calling Linux would associate the name GNU/Linux with all the commercial distributions as well, with non-free software. Do you really want GNU name associated with commercial software. I think its better that GNU/Linux name is only associated with the Debian distribution. I wouldn't want its significance diluted by it being used with commercial software. thanks, -anand
Re: it's not GNU/Linux; it's GNU
From: Steven Bosscher <s.bosscher@student.tudelft.nl>
To: Richard Stallman <rms@gnu.org>
Subject: Subject: Re: it's not GNU/Linux; it's GNU
Date: 23 May 2002 11:33:43 +0200
Cc: letters@lwn.net
GNU/Linux? *sigh* Here we go again...
You know what? How about using the acronym LINU-X from now on, to refer
to the system Linux^WGNU/Linux?
LINU-X: Linu Is Not Unix with X. A perfect mix of Linux/GNU, I would
say. Not a complete GNU system, not a complete Linux system, something
in between. And it also emphasizes another major compoment of the
system: the X window system, which is not part of GNU but should also
get its credits, at least if we apply your reasoning for GNU/Linux to X
as well.
But hey, what's a system without a decent desktop these days? Now this
is interesting, because what would happen if somebody uses KDE? KDE is
not linux, it's not X, and it most certainly is not GNU, either. So
should we call the system LINU-X/KDE? And if somebody want to use an
office suite with that, say OpenOffice? LINU-X/KDE/OpenOffice! And a
system without a browser isn't of much use these days, either. Now I
don't like Konq, so I use Mozilla. LINU-X/KDE/OpenOffice/Mozilla!!!
But then all of a sudden you don't agree!?
> Reductio ad absurdum says that it should be
> GNU/BSD/TrollTech/MySQL/etc/Linux which aside from being unreasonable
> would be bad because it also highlights non-Free and less Free
> licences.
OK I follow you when you say this would be unreadable. But
LINU-X/KDE/OpenOffice/Mozilla doesn't highlight any non-Free and/or less
Free licenses. The whole system would be GPL/LGPL/X, in fact... These
are all Free licenses.
So, what you're actually saying is:
1) Linux is not Linux, it's GNU/Linux because it's actually GNU
GNU deserves credits.
2a) Linux is not X, it's X on Linux, which is actually X on GNU/Linux,
but we should not call this system X/GNU/Linux.
2b) Linux is not KDE, it's KDE on GNU/Linux, etc.
2c) Linux is not {Open,K,GNOME-}office, its... etc.
They don't deserve credits.
You make no sense to me, you're arguments are at best inconsistent. If
you were consistent, your GNU (with hurd) system should be called
GNU/Mozilla/etc. Maybe you can explain once more: Why does GNU have
rights to credits for the Linux system, and why don't other major
contributors have those same rights?
Greetz
Steven
Re: it's not GNU/Linux; it's GNU
From: Richard Stallman <rms@gnu.org>
To: s.bosscher@student.tudelft.nl
Subject: Re: Subject: Re: it's not GNU/Linux; it's GNU
Date: Fri, 24 May 2002 15:13:15 -0600 (MDT)
Cc: letters@lwn.net
You know what? How about using the acronym LINU-X from now on, to refer
to the system Linux^WGNU/Linux?
This seems to be an attempt to excuse not solving the problem, rather
than a serious attempt to solve it.
In terms of informing the public, and in terms of fairness to the GNU
Project, there is no difference between "LINU-X" and "Linux". Both of
them will spread the same inaccurate picture of how *and why* the
system was developed. People will think it was started by Linus
Torvalds in 1991 just for fun, and won't know it was started by the
GNU Project in 1984 for the sake of your freedom and ours.
Now I
don't like Konq, so I use Mozilla. LINU-X/KDE/OpenOffice/Mozilla!!!
So, what you're actually saying is:
1) Linux is not Linux, it'ss GNU/Linux because it's actually GNU
GNU deserves credits.
2a) Linux is not X, it's X on Linux, which is actually X on GNU/Linux,
but we should not call this system X/GNU/Linux.
2b) Linux is not KDE, it's KDE on GNU/Linux, etc.
2c) Linux is not {Open,K,GNOME-}office, its... etc.
They don't deserve credits.
All of the contributors deserve credit, but some deserve it more
strongly than others. The system is basically GNU; the GNU Project is
the principal contributor. The others are secondary contributors.
They all deserve credit, but the principal contributor deserves it
most.
You cannot mention all the secondary contribitions in the name,
because there are too many of them. But you can mention more than
one, and where to draw the line is up to you. You can call the system
GNU/KDE/OpenOffice/Linux/Mozilla, and thus give credit to KDE,
OpenOffice, Mozilla and Linux, if you want. That would not be wrong.
However, if you feel that name is too long, then you can drop some of
the secondary contributions such as KDE, OpenOffice, Linux and
Mozilla. For instance, you might call it GNU/OpenOffice/Linux, or
GNU/Linux, or just GNU. The one name that you shouldn't omit is the
name given by the system's principal developer -- GNU. It's not right
to leave out the principal developer and give all the credit to a
secondary contribution such as KDE, OpenOffice, Linux or Mozilla.
The shortest legitimate name for this system is "GNU". I prefer to
call it "GNU/Linux", for three reasons:
* This system is not exactly the GNU system--it has a different
kernel. Calling it "GNU/Linux" helps distinguish it from GNU.
* It would be ungentlemanly to ask people to stop giving Linus
Torvalds a share of the credit. "GNU/Linux" gives him equal mention.
* People who have been taught that the system is "Linux" will see the
name "GNU/Linux" and realize it has something to do with what they
know about. They may not recognize this if we call it just "GNU".
GNU & Linux???
From: Ron Johnson <ron.l.johnson@cox.net>
To: rms@gnu.org
Subject: GNU & Linux???
Date: 25 May 2002 23:39:16 -0500
Cc: krooger@debian.org, letters@lwn.net
Mr. Stallman,
> It is not wrong to shorten the name GNU/Linux to GNU. The system is
> basically GNU. There are three reasons why I say "GNU/Linux":
>
> * To distinguish it from GNU properly speaking, which uses the Hurd.
>
> * To give Linus a share of the credit. It would be ungentlemanly
> to ask people to stop giving him credit.
Gack!!
Every night when you lay down to sleep, you should thank
${DEITY} that Linus came along to spread the GNU utilities
beyond academia.
In the past 11 years, _at_least_ 100,000 man-hours of effort
have gone into that kernel. GNU has been working on Hurd since
_way_ before Linux came out, and _still_ isn't at v1.0!
For you then to say "It would be ungentlemanly to ask people
to stop giving him credit" takes way more chutzpah than in all
of NYC & Miami Beach combined.
--
+---------------------------------------------------------+
| Ron Johnson, Jr. Home: ron.l.johnson@cox.net |
| Jefferson, LA USA http://ronandheather.dhs.org:81 |
| |
| "I have created a government of whirled peas..." |
| Maharishi Mahesh Yogi, 12-May-2002, |
! CNN, Larry King Live |
+---------------------------------------------------------+
Re: GNU & Linux???
From: Richard Stallman <rms@gnu.org>
To: ron.l.johnson@cox.net
Subject: Re: GNU & Linux???
Date: Sun, 26 May 2002 19:50:20 -0600 (MDT)
Cc: krooger@debian.org, letters@lwn.net
Every night when you lay down to sleep, you should thank
${DEITY} that Linus came along to spread the GNU utilities
beyond academia.
Describing the GNU system as "utilities" is quite an understatement.
GNU is not a set of utilities--GNU is an operating system. The
GNU/Linux system is pretty much the same as GNU, but not entirely the
same, because it has Linux in it too.
I appreciate Torvalds' contribution to the GNU/Linux system. I credit
Torvalds (not hypothetical gods) for this work, and that's one reason
I mention his contribution in the name of the operating system.
I also appreciate that Torvalds' kernel would have mattered little for
computer users' freedom, if not for the fact that we had already
produced most of a free operating system for it to fit in.
Giving him equal mention is more than fair.
Re: Open-Source Fight Flares at Pentagon (Washington Post)
From: Eric Smith <eric@brouhaha.com>
To: letters@lwn.net
Subject: Re: Open-Source Fight Flares at Pentagon (Washington Post)
Date: 28 May 2002 14:10:25 -0000
Gentlemen,
On May 23, you referenced an article by Jonathan Krim in the Washington
Post regarding use of open-source software in the Defense Department.
There was an interesting statement in the last paragraph of that
article:
... the Defense Department is now prohibited from purchasing any
software that has not undergone security testing by the NSA.
Perhaps more interesting is what the article did NOT say, which is that
free software does NOT need to be purchased. While many people focus on
the "free speech" aspect of free software (and rightfully so), there are
definitely some circumstances in which the "free beer" aspect can be
important and useful.
I'm not trying to suggest that the Defense Department and NSA should not
conduct security testing of free software, but merely that procurement
regulations are a complete non-issue for it.
Page editor: Jonathan Corbet