Thread (61 messages) 61 messages, 10 authors, 2020-08-14

Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE)

From: James Bottomley <James.Bottomley@HansenPartnership.com>
Date: 2020-08-11 15:32:56
Also in: dm-devel, linux-block, linux-fsdevel, linux-security-module, lkml

On Tue, 2020-08-11 at 10:48 -0400, Chuck Lever wrote:
quoted
On Aug 11, 2020, at 1:43 AM, James Bottomley
[off-list ref] wrote:
On Mon, 2020-08-10 at 19:36 -0400, Chuck Lever wrote:
[...]
quoted
quoted
Thanks for the help! I just want to emphasize that documentation
(eg, a specification) will be critical for remote filesystems.

If any of this is to be supported by a remote filesystem, then we
need an unencumbered description of the new metadata format
rather than code. GPL-encumbered formats cannot be contributed to
the NFS standard, and are probably difficult for other
filesystems that are not Linux-native, like SMB, as well.
I don't understand what you mean by GPL encumbered formats.  The
GPL is a code licence not a data or document licence.
IETF contributions occur under a BSD-style license incompatible
with the GPL.

https://trustee.ietf.org/trust-legal-provisions.html

Non-Linux implementers (of OEM storage devices) rely on such
standards processes to indemnify them against licensing claims.
Well, that simply means we won't be contributing the Linux
implementation, right? However, IETF doesn't require BSD for all
implementations, so that's OK.
Today, there is no specification for existing IMA metadata formats,
there is only code. My lawyer tells me that because the code that
implements these formats is under GPL, the formats themselves cannot
be contributed to, say, the IETF without express permission from the
authors of that code. There are a lot of authors of the Linux IMA
code, so this is proving to be an impediment to contribution. That
blocks the ability to provide a fully-specified NFS protocol
extension to support IMA metadata formats.
Well, let me put the counterpoint: I can write a book about how linux
device drivers work (which includes describing the data formats), for
instance, without having to get permission from all the authors ... or
is your lawyer taking the view we should be suing Jonathan Corbet,
Alessandro Rubini, and Greg Kroah-Hartman for licence infringement?  In
fact do they think we now have a huge class action possibility against
O'Reilly  and a host of other publishers ...
quoted
The way the spec process works in Linux is that we implement or
evolve a data format under a GPL implementaiton, but that
implementation doesn't implicate the later standardisation of the
data format and people are free to reimplement under any licence
they choose.
That technology transfer can happen only if all the authors of that
prototype agree to contribute to a standard. That's much easier if
that agreement comes before an implementation is done. The current
IMA code base is more than a decade old, and there are more than a
hundred authors who have contributed to that base.

Thus IMO we want an unencumbered description of any IMA metadata
format that is to be contributed to an open standards body (as it
would have to be to extend, say, the NFS protocol).
Fine, good grief, people who take a sensible view of this can write the
data format down and publish it under any licence you like then you can
pick it up again safely.  Would CC0 be OK? ... neither GPL nor BSD are
document licences and we shouldn't perpetuate bad practice by licensing
documentation under them.

James
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help