From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ludovic =?UTF-8?Q?Court=C3=A8s?= Subject: bug#38360: Retroarch might violate FSDG Date: Thu, 28 Nov 2019 17:27:53 +0100 Message-ID: <87zhggt186.fsf@gnu.org> References: <87d0df7wpv.fsf@gnu.org> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:470:142:3::10]:58171) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1iaMfE-0007H9-Mw for bug-guix@gnu.org; Thu, 28 Nov 2019 11:29:09 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1iaMfB-0003wB-JM for bug-guix@gnu.org; Thu, 28 Nov 2019 11:29:07 -0500 Received: from debbugs.gnu.org ([209.51.188.43]:53062) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1iaMf7-0003un-Sv for bug-guix@gnu.org; Thu, 28 Nov 2019 11:29:05 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1iaMf7-0005fF-PH for bug-guix@gnu.org; Thu, 28 Nov 2019 11:29:01 -0500 Sender: "Debbugs-submit" Resent-Message-ID: In-Reply-To: ("=?UTF-8?Q?Nicol=C3=B2?= Balzarotti"'s message of "Wed, 27 Nov 2019 00:26:48 +0100") List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: =?UTF-8?Q?Nicol=C3=B2?= Balzarotti Cc: 38360@debbugs.gnu.org Hi Nicol=C3=B2, Nicol=C3=B2 Balzarotti skribis: > We don't provide them _directly_, but when loading the program the first > option is "Load core". Then, first option again, is "Download core". Here > you have a list of "proprietary" .so.zip downloads. Retroarch, as far as I > understand, is encouraging the download of those programs, with no > licensing information (see [1]). I don't know if this is ok or if we can > patch it (hiding the "Download core" menu maybe?). Oh, that sounds pretty bad. In my view, it=E2=80=99s a problem: 1. from a user freedom viewpoint, because the user might unwillingly find themselves downloading non-free code, and thus Guix is not fulfilling its mission; 2. from a security and engineering viewpoint, because we certainly don=E2=80=99t want users to run code from arbitrary binaries downloaded from the net. I think it definitely needs to be fixed. > Debian _does_ provide (from their package manager) some o the cores [2], > two of them with the non-free tag. > If we patch retroarch to hide the download menu, to make it functional we > should also package some free cores. That sounds like a plan. Would you be able to help with that? Hopefully there are patches we can take from Debian, no? If nobody can work on it in a timely fashion, I would propose to remove retroarch until someone can do this work. WDYT? Thanks, Ludo=E2=80=99.