From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received-SPF: Pass (sender SPF authorized) identity=mailfrom; client-ip=2607:f8b0:4001:c0b::22c; helo=mail-it0-x22c.google.com; envelope-from=ard.biesheuvel@linaro.org; receiver=edk2-devel@lists.01.org Received: from mail-it0-x22c.google.com (mail-it0-x22c.google.com [IPv6:2607:f8b0:4001:c0b::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ml01.01.org (Postfix) with ESMTPS id 5290922361E4B for ; Thu, 8 Feb 2018 01:27:09 -0800 (PST) Received: by mail-it0-x22c.google.com with SMTP id p139so5785081itb.1 for ; Thu, 08 Feb 2018 01:32:54 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=M0b5tv4/rTWfMGJtaIwMPoumX49YZPOpupd61rihjkA=; b=SaksSFVn/6+dFwePxCzZ7Y+2TIN/d8sj6fJg5Y8mOnZWjT9C562oxYPmGfVfM48c20 4dMwMZvGjBzBefmFzCsLpnfs19X8fVP06ghXpaYnxQ6oMx/sM85PjuoIxM0eVyiZn9MJ 2BDC05l5YMO+r7GuelAhECthTu5SfnWTGh4kY= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=M0b5tv4/rTWfMGJtaIwMPoumX49YZPOpupd61rihjkA=; b=HWHrc3rSCOoFwssPH9QBh4t/o4A2PdP6Zc4uyh3EnJY+OrNH33CSKmaVui4pbHtTBG 1xvQXuFqMQFqFuaL2kVd6lPRbpy0fqFqYnym9HiKjSGLzr+Td0ZuBz5NrjassNQMa7Mo wywiB9r8T19Ef94jO53w+qIauApVXniLZY9pLtsi1gW4TloUkQ2nKwSTgBJXJirO472T s4YRXmRIOw9Ck4Z/OUUhXJ5y0lbrkq0YTnlBM5SLiqRbkOa8Y9Ko1LMDLov8H9ceZzfp 1me3gMH8zq2qLLPoEQyM4WDlXl6Vcgj0j9L5qF1Rh4NhHsh8GdwN2jClSbtGmOQ/2R3C gLKA== X-Gm-Message-State: APf1xPByCAQ33VU2OajEfosQ6jObCI2bndVvi7VRRyMcuTy09ggnYdry injWSPMO45v/AqqKxlnQFUNpfiR7mtKRInb1cDqqxuPq X-Google-Smtp-Source: AH8x226JZpC+EwDnboyL+692ulqqV+qdSk+1KTWO1aOzS9D9zCo5Q7avEHhGdH6JQMp1REexNumW4iznzReYssR52h4= X-Received: by 10.36.216.65 with SMTP id b62mr555770itg.17.1518082374030; Thu, 08 Feb 2018 01:32:54 -0800 (PST) MIME-Version: 1.0 Received: by 10.107.112.13 with HTTP; Thu, 8 Feb 2018 01:32:53 -0800 (PST) In-Reply-To: References: <20180207225822.28876-1-michael.d.kinney@intel.com> <20180207225822.28876-6-michael.d.kinney@intel.com> <151807874262.22216.16754691005585782342@jljusten-skl> From: Ard Biesheuvel Date: Thu, 8 Feb 2018 09:32:53 +0000 Message-ID: To: Laszlo Ersek Cc: Jordan Justen , "Kinney, Michael D" , "edk2-devel@lists.01.org" , "Yao, Jiewen" Subject: Re: [Patch 05/10] OvmfPkg: Add SafeIntLib and BmpSupportLib to DSC files X-BeenThere: edk2-devel@lists.01.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: EDK II Development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Feb 2018 09:27:10 -0000 Content-Type: text/plain; charset="UTF-8" On 8 February 2018 at 09:25, Laszlo Ersek wrote: > On 02/08/18 09:32, Jordan Justen wrote: > >> Given the wording from the contribution agreement, it appears that it >> would also be fine to just use Mike's Signed-off-by if he is >> authorized to contribute the code even though he didn't author it. > > So basically just > > """ > Contributed-under: TianoCore Contribution Agreement 1.1 > Signed-off-by: Michael D Kinney > """ > > implies Mike saying, "trust me guys, I got Microsoft's authorization (or > whoever the original authors were) to contribute their code under the > 2-clause BSDL". Is that right? > > Dunno why but this concept is hard for me to accept. :) "whoever the > original authors were" is super vague to me. Let's say I want to verify > that authorization myself: whom do I contact? Are the > "https://github.com/Microsoft/MS_UEFI/..." references considered > sufficient origin information? > This is exactly the reason: if someone contributes code under a suitable license, they should take full responsibility that the code in question is actually covered by that license. I refuse any responsibility for verifying the origin of code that others contribute, and I'm sure your workload doesn't allow it either.