You are viewing a plain text version of this content. The canonical link for it is here.
Posted to legal-discuss@apache.org by sebb <se...@gmail.com> on 2018/03/23 15:23:09 UTC
Location of ECCN controlled source
Just happened to notice that Pirk quote the following URL
https://dist.apache.org/repos/dist/dev/incubator/pirk/
as one of its Controlled sources in the file
https://www.apache.org/licenses/exports/
This seems wrong:
- dist.a.o is not intended for public use;
- the directory normally contains more than just source
- anyway the directory does not exist.
What needs to be done about this (if anything)?
---------------------------------------------------------------------
To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
For additional commands, e-mail: legal-discuss-help@apache.org
Re: Location of ECCN controlled source
Posted by William A Rowe Jr <wr...@rowe-clan.net>.
Nothing we release ever goes away.
http://archive.apache.org/dist/incubator/pirk/
On Fri, Mar 23, 2018 at 11:07 AM, John D. Ament <jo...@apache.org> wrote:
> The Pirk podling was retired. Release directory deleted.
>
> On Fri, Mar 23, 2018, 11:44 AM William A Rowe Jr <wr...@rowe-clan.net>
> wrote:
>>
>> On Fri, Mar 23, 2018 at 10:23 AM, sebb <se...@gmail.com> wrote:
>> > Just happened to notice that Pirk quote the following URL
>> >
>> > https://dist.apache.org/repos/dist/dev/incubator/pirk/
>> >
>> > as one of its Controlled sources in the file
>> >
>> > https://www.apache.org/licenses/exports/
>> >
>> > This seems wrong:
>> > - dist.a.o is not intended for public use;
>> > - the directory normally contains more than just source
>> > - anyway the directory does not exist.
>> >
>> > What needs to be done about this (if anything)?
>>
>> AIUI, repeat the filing/notification with the corrected path to the
>> distribution?
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
>> For additional commands, e-mail: legal-discuss-help@apache.org
>>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
For additional commands, e-mail: legal-discuss-help@apache.org
Re: Location of ECCN controlled source
Posted by Stian Soiland-Reyes <st...@apache.org>.
ECCN-wise any making available on the Internet of controlled source code
counts, regardless of our internal release policy.
Perhaps it is a good idea to use the archive URIs for all entries? The idea
is that the authorities can find the source code for their own inspection,
not that we list every possible URL variant, automated snapshot builds or
mirrors accessible by users.
In theory the ECCN report should be sent before the code is even committed
in the first places (I know!) - obviously this is tricky for incubator
podlings who import existing code bases.
I think at point of retiring and graduation there should be a check to tidy
any ECCN entries by the IPMC (retiring) or new PMC (graduation).
On Fri, 23 Mar 2018, 14:36 sebb, <se...@gmail.com> wrote:
> On 23 March 2018 at 18:09, John D. Ament <jo...@apache.org> wrote:
> >
> >
> > On Fri, Mar 23, 2018 at 1:32 PM Roman Shaposhnik <ro...@shaposhnik.org>
> > wrote:
> >>
> >> On Fri, Mar 23, 2018 at 10:18 AM, sebb <se...@gmail.com> wrote:
> >> > On 23 March 2018 at 17:12, Roman Shaposhnik <ro...@shaposhnik.org>
> >> > wrote:
> >> >> On Fri, Mar 23, 2018 at 9:10 AM, sebb <se...@gmail.com> wrote:
> >> >>> OK, so should the ECCN entry be removed then?
> >> >>
> >> >> Quick question: so when a podling gets retired we also lose the
> >> >> codebase
> >> >> and all the releases? I've just realized that it is different from
> TLP
> >> >> moving
> >> >> to the attic.
> >> >
> >> > No, the code has not been deleted; see
> >> >
> >> > https://git1-us-west.apache.org/repos/asf?p=incubator-pirk.git
> >> >
> >> > However the dist.a.o files have been deleted because they are the
> >> > source for the ASF mirrors ( from which the Pirk released code has
> >> > been removed.)
> >>
> >> That's what I would expect to happen. So we're on the same page so far.
> >>
> >> Bear with me for the next steps:
> >>
> >> 1. My understanding is that the above is NOT considered to be a release
> >> and hence doesn't require an ECCN -- so we're good there.
> >>
> >> > Old releases are still on the archive server.
> >> >
> >> > http://archive.apache.org/dist/incubator/pirk/
> >>
> >> 2. This, on the other hand, IS considered to be a release (even if
> >> it has a standard Incubator DISCLAIMER) and that *would* require
> >> an ECCN, no?
> >>
> >
> > It would. Perhaps for all future ECCNs we use the archive URL (which
> will
> > always work)?
>
> Note that the URL column is headed "Controlled Source".
> So a code repo URL might do just as well.
>
> AFAICT dist.apache.org was never correct.
>
> >>
> >> Thanks,
> >> Roman.
> >>
> >> ---------------------------------------------------------------------
> >> To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
> >> For additional commands, e-mail: legal-discuss-help@apache.org
> >>
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
> For additional commands, e-mail: legal-discuss-help@apache.org
>
>
Re: Location of ECCN controlled source
Posted by sebb <se...@gmail.com>.
On 23 March 2018 at 18:09, John D. Ament <jo...@apache.org> wrote:
>
>
> On Fri, Mar 23, 2018 at 1:32 PM Roman Shaposhnik <ro...@shaposhnik.org>
> wrote:
>>
>> On Fri, Mar 23, 2018 at 10:18 AM, sebb <se...@gmail.com> wrote:
>> > On 23 March 2018 at 17:12, Roman Shaposhnik <ro...@shaposhnik.org>
>> > wrote:
>> >> On Fri, Mar 23, 2018 at 9:10 AM, sebb <se...@gmail.com> wrote:
>> >>> OK, so should the ECCN entry be removed then?
>> >>
>> >> Quick question: so when a podling gets retired we also lose the
>> >> codebase
>> >> and all the releases? I've just realized that it is different from TLP
>> >> moving
>> >> to the attic.
>> >
>> > No, the code has not been deleted; see
>> >
>> > https://git1-us-west.apache.org/repos/asf?p=incubator-pirk.git
>> >
>> > However the dist.a.o files have been deleted because they are the
>> > source for the ASF mirrors ( from which the Pirk released code has
>> > been removed.)
>>
>> That's what I would expect to happen. So we're on the same page so far.
>>
>> Bear with me for the next steps:
>>
>> 1. My understanding is that the above is NOT considered to be a release
>> and hence doesn't require an ECCN -- so we're good there.
>>
>> > Old releases are still on the archive server.
>> >
>> > http://archive.apache.org/dist/incubator/pirk/
>>
>> 2. This, on the other hand, IS considered to be a release (even if
>> it has a standard Incubator DISCLAIMER) and that *would* require
>> an ECCN, no?
>>
>
> It would. Perhaps for all future ECCNs we use the archive URL (which will
> always work)?
Note that the URL column is headed "Controlled Source".
So a code repo URL might do just as well.
AFAICT dist.apache.org was never correct.
>>
>> Thanks,
>> Roman.
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
>> For additional commands, e-mail: legal-discuss-help@apache.org
>>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
For additional commands, e-mail: legal-discuss-help@apache.org
Re: Location of ECCN controlled source
Posted by "John D. Ament" <jo...@apache.org>.
On Fri, Mar 23, 2018 at 1:32 PM Roman Shaposhnik <ro...@shaposhnik.org>
wrote:
> On Fri, Mar 23, 2018 at 10:18 AM, sebb <se...@gmail.com> wrote:
> > On 23 March 2018 at 17:12, Roman Shaposhnik <ro...@shaposhnik.org>
> wrote:
> >> On Fri, Mar 23, 2018 at 9:10 AM, sebb <se...@gmail.com> wrote:
> >>> OK, so should the ECCN entry be removed then?
> >>
> >> Quick question: so when a podling gets retired we also lose the codebase
> >> and all the releases? I've just realized that it is different from TLP
> moving
> >> to the attic.
> >
> > No, the code has not been deleted; see
> >
> > https://git1-us-west.apache.org/repos/asf?p=incubator-pirk.git
> >
> > However the dist.a.o files have been deleted because they are the
> > source for the ASF mirrors ( from which the Pirk released code has
> > been removed.)
>
> That's what I would expect to happen. So we're on the same page so far.
>
> Bear with me for the next steps:
>
> 1. My understanding is that the above is NOT considered to be a release
> and hence doesn't require an ECCN -- so we're good there.
>
> > Old releases are still on the archive server.
> >
> > http://archive.apache.org/dist/incubator/pirk/
>
> 2. This, on the other hand, IS considered to be a release (even if
> it has a standard Incubator DISCLAIMER) and that *would* require
> an ECCN, no?
>
>
It would. Perhaps for all future ECCNs we use the archive URL (which will
always work)?
> Thanks,
> Roman.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
> For additional commands, e-mail: legal-discuss-help@apache.org
>
>
Re: Location of ECCN controlled source
Posted by Roman Shaposhnik <ro...@shaposhnik.org>.
On Fri, Mar 23, 2018 at 10:18 AM, sebb <se...@gmail.com> wrote:
> On 23 March 2018 at 17:12, Roman Shaposhnik <ro...@shaposhnik.org> wrote:
>> On Fri, Mar 23, 2018 at 9:10 AM, sebb <se...@gmail.com> wrote:
>>> OK, so should the ECCN entry be removed then?
>>
>> Quick question: so when a podling gets retired we also lose the codebase
>> and all the releases? I've just realized that it is different from TLP moving
>> to the attic.
>
> No, the code has not been deleted; see
>
> https://git1-us-west.apache.org/repos/asf?p=incubator-pirk.git
>
> However the dist.a.o files have been deleted because they are the
> source for the ASF mirrors ( from which the Pirk released code has
> been removed.)
That's what I would expect to happen. So we're on the same page so far.
Bear with me for the next steps:
1. My understanding is that the above is NOT considered to be a release
and hence doesn't require an ECCN -- so we're good there.
> Old releases are still on the archive server.
>
> http://archive.apache.org/dist/incubator/pirk/
2. This, on the other hand, IS considered to be a release (even if
it has a standard Incubator DISCLAIMER) and that *would* require
an ECCN, no?
Thanks,
Roman.
---------------------------------------------------------------------
To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
For additional commands, e-mail: legal-discuss-help@apache.org
Re: Location of ECCN controlled source
Posted by sebb <se...@gmail.com>.
On 23 March 2018 at 17:12, Roman Shaposhnik <ro...@shaposhnik.org> wrote:
> On Fri, Mar 23, 2018 at 9:10 AM, sebb <se...@gmail.com> wrote:
>> OK, so should the ECCN entry be removed then?
>
> Quick question: so when a podling gets retired we also lose the codebase
> and all the releases? I've just realized that it is different from TLP moving
> to the attic.
No, the code has not been deleted; see
https://git1-us-west.apache.org/repos/asf?p=incubator-pirk.git
However the dist.a.o files have been deleted because they are the
source for the ASF mirrors ( from which the Pirk released code has
been removed.)
Old releases are still on the archive server.
http://archive.apache.org/dist/incubator/pirk/
> Thanks,
> Roman.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
> For additional commands, e-mail: legal-discuss-help@apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
For additional commands, e-mail: legal-discuss-help@apache.org
Re: Location of ECCN controlled source
Posted by Roman Shaposhnik <ro...@shaposhnik.org>.
On Fri, Mar 23, 2018 at 9:10 AM, sebb <se...@gmail.com> wrote:
> OK, so should the ECCN entry be removed then?
Quick question: so when a podling gets retired we also lose the codebase
and all the releases? I've just realized that it is different from TLP moving
to the attic.
Thanks,
Roman.
---------------------------------------------------------------------
To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
For additional commands, e-mail: legal-discuss-help@apache.org
Re: Location of ECCN controlled source
Posted by sebb <se...@gmail.com>.
OK, so should the ECCN entry be removed then?
On 23 March 2018 at 16:07, John D. Ament <jo...@apache.org> wrote:
> The Pirk podling was retired. Release directory deleted.
>
> On Fri, Mar 23, 2018, 11:44 AM William A Rowe Jr <wr...@rowe-clan.net>
> wrote:
>>
>> On Fri, Mar 23, 2018 at 10:23 AM, sebb <se...@gmail.com> wrote:
>> > Just happened to notice that Pirk quote the following URL
>> >
>> > https://dist.apache.org/repos/dist/dev/incubator/pirk/
>> >
>> > as one of its Controlled sources in the file
>> >
>> > https://www.apache.org/licenses/exports/
>> >
>> > This seems wrong:
>> > - dist.a.o is not intended for public use;
>> > - the directory normally contains more than just source
>> > - anyway the directory does not exist.
>> >
>> > What needs to be done about this (if anything)?
>>
>> AIUI, repeat the filing/notification with the corrected path to the
>> distribution?
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
>> For additional commands, e-mail: legal-discuss-help@apache.org
>>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
For additional commands, e-mail: legal-discuss-help@apache.org
Re: Location of ECCN controlled source
Posted by "John D. Ament" <jo...@apache.org>.
The Pirk podling was retired. Release directory deleted.
On Fri, Mar 23, 2018, 11:44 AM William A Rowe Jr <wr...@rowe-clan.net>
wrote:
> On Fri, Mar 23, 2018 at 10:23 AM, sebb <se...@gmail.com> wrote:
> > Just happened to notice that Pirk quote the following URL
> >
> > https://dist.apache.org/repos/dist/dev/incubator/pirk/
> >
> > as one of its Controlled sources in the file
> >
> > https://www.apache.org/licenses/exports/
> >
> > This seems wrong:
> > - dist.a.o is not intended for public use;
> > - the directory normally contains more than just source
> > - anyway the directory does not exist.
> >
> > What needs to be done about this (if anything)?
>
> AIUI, repeat the filing/notification with the corrected path to the
> distribution?
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
> For additional commands, e-mail: legal-discuss-help@apache.org
>
>
Re: Location of ECCN controlled source
Posted by William A Rowe Jr <wr...@rowe-clan.net>.
On Fri, Mar 23, 2018 at 10:23 AM, sebb <se...@gmail.com> wrote:
> Just happened to notice that Pirk quote the following URL
>
> https://dist.apache.org/repos/dist/dev/incubator/pirk/
>
> as one of its Controlled sources in the file
>
> https://www.apache.org/licenses/exports/
>
> This seems wrong:
> - dist.a.o is not intended for public use;
> - the directory normally contains more than just source
> - anyway the directory does not exist.
>
> What needs to be done about this (if anything)?
AIUI, repeat the filing/notification with the corrected path to the
distribution?
---------------------------------------------------------------------
To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
For additional commands, e-mail: legal-discuss-help@apache.org