From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: joakim@verona.se Newsgroups: gmane.emacs.devel Subject: Re: code signing with foreign function interface? Date: Sun, 07 Mar 2010 20:39:46 +0100 Message-ID: References: <83sk8c2ek4.fsf@gnu.org> NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: dough.gmane.org 1267990806 7093 80.91.229.12 (7 Mar 2010 19:40:06 GMT) X-Complaints-To: usenet@dough.gmane.org NNTP-Posting-Date: Sun, 7 Mar 2010 19:40:06 +0000 (UTC) Cc: emacs-devel@gnu.org To: Eli Zaretskii Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Sun Mar 07 20:40:01 2010 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([199.232.76.165]) by lo.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1NoMKV-0002qo-Lo for ged-emacs-devel@m.gmane.org; Sun, 07 Mar 2010 20:39:59 +0100 Original-Received: from localhost ([127.0.0.1]:54042 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1NoMKV-0004cm-4w for ged-emacs-devel@m.gmane.org; Sun, 07 Mar 2010 14:39:59 -0500 Original-Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1NoMKP-0004ch-T8 for emacs-devel@gnu.org; Sun, 07 Mar 2010 14:39:53 -0500 Original-Received: from [140.186.70.92] (port=59369 helo=eggs.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1NoMKO-0004cZ-4m for emacs-devel@gnu.org; Sun, 07 Mar 2010 14:39:52 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.69) (envelope-from ) id 1NoMKN-0004lN-I5 for emacs-devel@gnu.org; Sun, 07 Mar 2010 14:39:52 -0500 Original-Received: from iwfs.imcode.com ([82.115.149.64]:41663 helo=gate.verona.se) by eggs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1NoMKL-0004kz-B9; Sun, 07 Mar 2010 14:39:49 -0500 Original-Received: from localhost.localdomain (IDENT:1005@localhost [127.0.0.1]) by gate.verona.se (8.13.4/8.11.4) with ESMTP id o27JdkHh003239; Sun, 7 Mar 2010 20:39:47 +0100 In-Reply-To: <83sk8c2ek4.fsf@gnu.org> (Eli Zaretskii's message of "Sun, 07 Mar 2010 20:04:59 +0200") User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/23.1.90 (gnu/linux) X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.4-2.6 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:121714 Archived-At: Eli Zaretskii writes: >> From: joakim@verona.se >> Date: Sun, 07 Mar 2010 07:24:47 +0100 >> >> The GPL cannot prevent free and non-free code being distributed >> together. Therefore a distributor can push GPL non-compliance to an >> unknowing user. >> >> If code signing of dynamic libraries is employed, the end-user can be >> made aware he is breaking the intentions of the GPL. Would this be >> enough to satisfy the requirements for an Emacs FFI? > > Forgive me for asking a possibly dumb question (due to my total > ignorance on this subject): How will you distinguish system libraries > (which are exempt of being under GPL) from the other kind? I didnt mean that all dynamic linkage would use this particular interface. To exemplify: - librsvg2.so is dynamically loaded in image.c. This will be untouched. - libmediastreamer2.so, a random dll I want to use, is loaded with the new emacs-ffi facility. But oh no! it doesnt have a proper GPL manifest signature. I then use a signing tool to add the signature to the .so file, and emacs-ffi is now happy. - now I want to add the signature to a non-free dll. I can do it easily but I will feel bad. If I redistribute the wrongly signed non-free dll I will be discovered and humiliated. - Now I want to add the signature to a free dll with some form of hard to understand license which isnt GPL compatible. If I redistribute the wrongly signed dll I will be discovered and humiliated, this time perhaps unjustly. -- Joakim Verona