On 02. 12. 22 8:23, Sun, Yunying wrote:
Hi,
I'm packaging linux-sgx SDK for Fedora, with review request ticket:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=2085444 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=2085444
linux-sgx has some Intel signed binaries included such as libsgx_{qve,tdqe,id_enclave,pce,qe3,le,qe,pve}.signed.so, as stated in License.txt:
https://github.com/intel/linux-sgx/blob/master/License.txt https://github.com/intel/linux-sgx/blob/master/License.txt
According to https://fedoraproject.org/wiki/Licensing:SoftwareTypes#Binary_Firmware https://fedoraproject.org/wiki/Licensing:SoftwareTypes#Binary_Firmware, it has:
/The License tag for any firmware that disallows modification must be set to: "Redistributable, no modification permitted"/
So I added "Redistributable, no modification permitted" to the “License:” in spec file:
https://yunyings.fedorapeople.org/sgxsdk.spec https://yunyings.fedorapeople.org/sgxsdk.spec
In recent review comment, Miro suggested that this "Redistributable, no modification permitted" is not appropriate for license name.
But going through all licenses on https://docs.fedoraproject.org/en-US/legal/allowed-licenses/ https://docs.fedoraproject.org/en-US/legal/allowed-licenses/, I can’t find the right license for these Intel signed binaries.
Could you point me to the right license, or if none exists for this case, guide me how to proceed? Thank you.
I think that each such license now needs to be reviewed separately. See https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1#I_maintain_a_fi...
Legal folks, note that this is not a firmware per se, but FESCo approved to treat it as such, pending legal review, in https://pagure.io/fesco/issue/2153
""" FESCo permits the use of pre-signed Intel SGX components under the firmware clause of the Licensing Guidelines, provided that Fedora Legal concurs. """