Statically linked libraries and license manifest


Jasper Orschulko
 

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi,

my question more or less reiterates the following:
https://www.yoctoproject.org/pipermail/yocto/2018-July/041854.html

I am trying to find a way to list statically linked libraries in the
license manifest, but so far I am at a loss. To my understanding Yocto
does not understand packages included using DEPENDS and not RDEPENDS as
part of the resulting image, however technically source code from the
dependee can (and will) end up on the image as part of the dependent
package. This is a serious issue from a legal point of view, as the
developer ultimately might end up with an incomplete list of licenses,
when relying on the Yocto license manifest.

Please, do correct me if I'm wrong :)

- --
With best regards

Jasper Orschulko
DevOps Engineer

Tel. +49 30 58 58 14 265
Fax +49 30 58 58 14 999
Jasper.Orschulko@iris-sensing.com

• • • • • • • • • • • • • • • • • • • • • • • • • •

iris-GmbH
infrared & intelligent sensors
Ostendstraße 1-14 | 12459 Berlin

https://iris-sensing.com/



-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEE4WyPMIC5Ap4+Ooo1Ygqew07VMNUFAmCiq3AACgkQYgqew07V
MNWgRQf/Z3Hs3YOf5CT6TynZp9rNPEpYAP2d4lgJ9upep3WvTfQsm0gXTqLvYWDO
PZ1awuWdNAp054BdvhJnApYnM0UOOAmVg9lMO3PTBKGQvDdDBRX0LToHViky2npu
m/n2fIWpoMjuRQdo4QbErCm6foVc9aXaxGT/6nVhGb1fjkX8acjlyvRo/cpQDrWL
pYb2Nkqz4V1bB+lzWi9gr/Io7SM/EGzlu3EFS/PEidff+bPFiQr4cmI+NXXOhr8k
mYS4K6KENaT+wD9reVqJABnbtxJxCZu4JHlCg+CqlfYheblCAZhe1SDtYJBgisEq
1allapNlrNJAqH5UN1jT7ZKAwrt0ww==
=/wvF
-----END PGP SIGNATURE-----

Join yocto@lists.yoctoproject.org to automatically receive all group messages.