For Approval: Public Security Interrest "PSI" License
Wolfram Kleff
xenonfs at users.sourceforge.net
Thu Sep 11 20:12:46 UTC 2003
Hello license-discuss at opensource.org,
please let me know if the Public Security Interrest "PSI" license meets your
criteria of "Open Source".
This license is intendet for high security open source software.
I don't see a conflict with the "Open Soure definition" Version 1.9 from
http://opensource.org/docs/definition.php.
The license in detail:
(Software in the) Public Security Interrest "PSI" License
Version 1, 2001
Copyright (C) 2001 Wolfram Kleff
Everyone is permitted to copy and distribute verbatim copies
of this license document, but changing it is not allowed.
The Public Security Interest License (PSI-License) is
very similar to other Open Source Licenses
(especially the GNU General Public License "GPL") but focuses
on security aspects. So you can see the PSI-License like an addition to
the GPLicense since security aspects are not covered by the GPL:
"Activities other than copying, distribution and modification are not
covered by this License; they are outside its scope." - GPL.
The PSI-License adds the following security rights/restrictions:
TERMS AND CONDITIONS
S1. You may not violate the security of this software, its ideas,
its protocols or structures.
S2. You must grand all privacy, data protections or other security benefits
you gain from this software to all other people.
If you want to use this software you might not restrict anybody else's
use.
"Security for everyone"
S3. You may not force other people to compromise the security for them self
or other people involved.
S4. You may only use this software in a secure processing environment
(software + hardware).
Since there is usually no absolute "secure processing environment"
it depends on your best knowledge to be secure.
However the processing environment must be verifiable by you or by the
public.
So source code or construction principles of the processing environment
must be known.
This software might not be made depend on software which violates the
security or other terms of this License
(e.g. Software without available source code or proprietary software).
This includes among other things the process of "making" (compiling, ...)
or "running" (Operating System, Library, ...).
S5. You should feel encouraged to publish all security relevant errors.
The preferred action is to notify to author/maintainer of the software
first, so bugs could be fixed before they get exploited.
The software or the processing environment may not be covered by any
"non disclosure" restrictions.
S6. This software has been done with the best intentions, however you should
not abuse its features. You might not intentionally harm other people
with this software.
S7. This license is additionally protected by the PSI-License itself -
modification is only allowed by the author.
If any juristic attack is found against the spirit or the intention of
this license, it will be changed accordingly.
The remaining Terms and Conditions are taken and adapted/modified from the GPL
to meet the above criteria:
G0. This License applies to any program or other work which contains
a notice placed by the copyright holder saying it is licensed
under the terms of this Public Security Interest (PSI) License.
The "Program" (software), below, refers to any such program or work,
and a "work based on the Program" means either the Program or any
derivative work under copyright law:
that is to say, a work containing the Program or a portion of it,
either verbatim or with modifications and/or translated into another
language. (Hereinafter, translation is included without limitation in
the term "modification".) Each licensee is addressed as "you".
G1. You may copy and distribute verbatim copies of the Program's
source code as you receive it, in any medium, provided that you
conspicuously and appropriately publish on each copy an appropriate
copyright notice and disclaimer of warranty; keep intact all the
notices that refer to this License and to the absence of any warranty;
and give any other recipients of the Program a copy of this License
along with the Program.
You may charge a fee for the physical act of transferring a copy, and
you may at your option offer warranty protection in exchange for a fee.
G2. You may modify your private copy or copies of the Program or any portion
of it for your own personal use if you don't violate the above security
restrictions, thus forming a work based on the Program, but may _not_ copy or
distribute such modifications or work.
But you may distribute or copy difference files (known as e.g. "diff-file"
or "patch-file") under the terms of this License, provided that you also
meet all of these conditions:
a) You must cause the modified files to carry prominent notices
stating that you changed the files and the date of any change.
A brief change summary would be nice.
b) You must cause any work that you distribute or publish, that in
whole or in part contains or is derived from the Program or any
part thereof, to be licensed as a whole at no charge to all third
parties under the terms of this License.
c) If the modified program normally reads commands interactively
when run, you must cause it, when started running for such
interactive use in the most ordinary way, to print or display an
announcement including an appropriate copyright notice and a
notice that there is no warranty (or else, saying that you provide
a warranty) and that users may redistribute the program under
these conditions, and telling the user how to view a copy of this
License. (Exception: if the Program itself is interactive but
does not normally print such an announcement, your work based on
the Program is not required to print an announcement.)
It is not the intent of this section to claim rights or contest
your rights to work written entirely by you; rather, the intent is to
exercise the right to control the distribution of derivative or
collective works based on the Program.
In addition, mere aggregation of another work not based on the Program
with the Program (or with a work based on the Program) on a volume of
a storage or distribution medium does not bring the other work under
the scope of this License.
G3. You may copy and distribute the Program (or a work based on it,
under Section G2) in object code or executable form under the terms of
Sections G1 and G2 above provided that you also do all of the following:
a) Accompany it with the _complete_ corresponding machine-readable
("compilable") source code, which must be distributed under the terms
of Sections G1 and G2 above on the same medium you want do distribute
the object code or executable form.
b) Accompany a documentation, scripts or any other information necessary
to recompile and verify that the object code or executable is exactly
the same as your compiled object code or executable.
c) The process of making object code or executable doesn't contain
security flaws to your best knowledge.
d) You should use a cryptographic method to sign your distributed data
to offer integrity and authenticity.
For an executable work, complete source code means all the source code
for all modules it contains, plus any associated interface definition
files, plus the scripts used to control compilation and installation
of the executable. However, as a special exception, the source code
distributed need not include anything that is normally distributed and
available to the public with the major components (compiler, kernel, and so
on)
of the operating system on which the executable runs, unless that component
itself accompanies the executable.
If distribution of executable or object code is made by offering
access to copy from a designated place, then offering equivalent
access to copy the source code from the same place counts as
distribution of the source code ("same media"), even though third parties
are not compelled to copy the source along with the object code.
G4. You may not use, copy, modify, sublicense, or distribute the Program
except as expressly provided under this License. Any attempt
otherwise to use, copy, modify, sublicense or distribute the Program is
void, and will automatically terminate your rights under this License.
However, parties who have received copies, or rights, from you under
this License will not have their licenses terminated so long as such
parties remain in full compliance.
G5. You are not required to accept this License, since you have not
signed it. However, nothing else grants you permission to use, modify or
distribute the Program or its derivative works. These actions are
prohibited by law if you do not accept this License. Therefore, by
modifying or distributing the Program (or any work based on the
Program), you indicate your acceptance of this License to do so, and
all its terms and conditions for copying, distributing or modifying
the Program or works based on it.
G6. Each time you redistribute the Program (or any work based on the
Program), the recipient automatically receives a license from the
original licensor to copy, distribute or modify the Program subject to
these terms and conditions. You may not impose any further
restrictions on the recipients' exercise of the rights granted herein.
You are not responsible for enforcing compliance by third parties to
this License.
G7. If, as a consequence of a court judgment or allegation of patent
infringement or for any other reason (not limited to patent issues),
conditions are imposed on you (whether by court order, agreement or
otherwise) that contradict the conditions of this License, they do not
excuse you from the conditions of this License. If you cannot
distribute so as to satisfy simultaneously your obligations under this
License and any other pertinent obligations, then as a consequence you
may not distribute the Program at all. For example, if a patent
license would not permit royalty-free redistribution of the Program by
all those who receive copies directly or indirectly through you, then
the only way you could satisfy both it and this License would be to
refrain entirely from distribution of the Program.
If any portion of this section is held invalid or unenforceable under
any particular circumstance, the balance of the section is intended to
apply and the section as a whole is intended to apply in other
circumstances.
It is not the purpose of this section to induce you to infringe any
patents or other property right claims or to contest validity of any
such claims; this section has the sole purpose of protecting the
integrity of the free software distribution system, which is
implemented by public license practices. Many people have made
generous contributions to the wide range of software distributed
through that system in reliance on consistent application of that
system; it is up to the author/donor to decide if he or she is willing
to distribute software through any other system and a licensee cannot
impose that choice.
This section is intended to make thoroughly clear what is believed to
be a consequence of the rest of this License.
G8. If the distribution and/or use of the Program is restricted in
certain countries either by patents or by copyrighted interfaces, the
original copyright holder who places the Program under this License
may add an explicit geographical distribution limitation excluding
those countries, so that distribution is permitted only in or among
countries not thus excluded. In such case, this License incorporates
the limitation as if written in the body of this License.
G9. Revised and/or new versions of this License may be published from
time to time if necessary (see point S7). Such new versions will
be similar in spirit to the present version, but may differ in detail to
address new problems or concerns.
Each version is given a distinguishing version number.
G10. If you wish to incorporate parts of the Program into other free
programs whose distribution conditions (e.g. license) are different, write
to the author to ask for permission.
NO WARRANTY
G11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY
FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN
OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES
PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED
OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS
TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE
PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING,
REPAIR OR CORRECTION.
G12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR
REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES,
INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING
OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED
TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY
YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER
PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE
POSSIBILITY OF SUCH DAMAGES.
--
license-discuss archive is at http://crynwr.com/cgi-bin/ezmlm-cgi?3
More information about the License-discuss
mailing list