[aur-general] Copyrighted source on https://aur.archlinux.org/

[Daniel Berjón Díez]

Hi Santiago, all,

I'm very new to Arch and I don't know if the package I'm going to put
forward as an example violates itself any AUR rule, but for instance
'ufsd-pro-dkms' [1] depends on a file that is not freely distributable, and
the PKGBUILD has a file:// URL, so the user has to procure the file herself
to build it; maybe this solution is more reasonable than deleting the
package altogether, so that users that do want to install it don't have to
create their own PKGBUILD needlessly.

Cheers,
Daniel

[1]: https://aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=ufsd-pro-dkms

On Tue, 25 Jun 2019 at 17:14, Santiago Torres-Arias via aur-general <
aur-general at archlinux.org> wrote:

> Hi Phillip.
>
> I also don't want to enter a legal battle, and I certainly don't speak
> for the rest of the Arch Linux team. However, it appears to me that
> there's plenty going on here:
>
> 1) The distribution website is the first hit if you google
>    libccmio-2.6.1-.tar.gz, I wonder if your searches are being directed
>    to the AUR given your previous search history (i.e., filter-bubble).
> 2) It appears that the copyright owner is Adapco, not siemens. IIUC
>    Siemens bought Adapco on 2016. Did you guys forget to update
>    the copyright notice or is this an old tarball that was distributed
>    before?
> 3) It appears this is hosted on a US .gov website, under a portal for
>    distribution of scientific code. I'm sure would like to know if they
>    are distributed copyrighted information. I can't seem to find a
>    disclaimer noting they are able to distribute this tarball.
> 4) It also appears the tarball is distributing GPL-licensed code, which
>    makes me wonder if this tarball itself is in violation of the GPL
>    license (or was, and that's why the tarball is publicly available
>    now).
>
> Either way, I do agree that deleting the package until this matter is
> settled is a reasonable way forward.
>
> Thanks,
> -Santiago.
>
> On Tue, Jun 25, 2019 at 02:53:36PM +0000, Jones, Philip via aur-general
> wrote:
> > Jerome
> >
> > I appreciate that the package (
> https://aur.archlinux.org/packages/libccmio/) is not hosted on the site
> but if you Google " libccmio-2.6.1.tar.gz" it is the top hit.
> >
> > The source has a copyright that states  “The unauthorized use,
> distribution, or duplication of this program is prohibited.”
> >
> > I don’t want to enter into a legal argument if the link is distribution
> or not, all I ask is that the listing be removed as a matter of courtesy.
> The material is clearly not designed to be publicly distributed.
> >
> > Philip
> >
> > -----------------
> > Siemens Industry Software Limited is a limited company registered in
> England and Wales.
> > Registered number: 3476850.
> > Registered office: Faraday House, Sir William Siemens Square, Frimley,
> Surrey, GU16 8QD.
>