[sr-dev] Re: Debian SBOM for kamailio

Hello Olle, IMHO the Debian way is correct. This is also the way companies are doing it, some examples: https://www.mbvans.com/en/legal-notices/foss-disclosure https://oss.bosch-cm.com/gm.html (click at one of the links for the licence terms for a huge PDF) The only way to "fix" this would be to rewrite the respective parts of the code and then put it under another licence, or ask the original author(s) for permission to re-licence. You cannot distribute Kamailio under BSD licence, as many of its parts are GPLv2 or later, as clearly indicated in the first section of the copyright file. Cheers, Henning -----Original Message----- From: Olle E. Johansson <oej(a)edvina.net> Sent: Donnerstag, 30. März 2023 10:45 To: Kamailio (SER) - Development Mailing List <sr-dev(a)lists.kamailio.org> Subject: [sr-dev] Re: Debian SBOM for kamailio Ok, so that’s where it came from. The thing is that as you create a package of Kamailiio, in my view it’s distributed under GPL v2, regardless of the license of the source file. Should we really list all those license in the package as it seems strange for a software package to have multiple licenses. It’s not that users can select which license they use Kamailio under. I think this is more confusing and as these kind of tools become more used, the confusion will be even bigger. Suddenly we have someone distributing Kamailio under BSD license since they belived they had a choice… /O