Files
tqma6-yocto-mirror/docs/03-license-analysis/license-summary.md

155 lines
4.5 KiB
Markdown
Raw Normal View History

# License Compliance Table - UT Project
**Project:** UT (Universität/Projekt)
**Target:** TQMa6UL Yocto BSP
**Date:** 2026-03-01
**Scope:** Complete license analysis for military use approval
---
## Military Use Guidelines
-**Approved**: Open source licenses without military restrictions
- ⚠️ **Review Required**: Check specific license terms
-**Excluded**: Explicit military use prohibition
**Note:** GPL licenses are approved WITH source code provision requirement.
---
## License Summary by Category
### Approved for Military Use (✅)
| License | Type | Notes |
|---------|------|-------|
| MIT | Permissive | No restrictions |
| BSD-2-Clause | Permissive | No restrictions |
| BSD-3-Clause | Permissive | No restrictions |
| Apache-2.0 | Permissive | Patent grant included |
| ISC | Permissive | No restrictions |
| GPL-2.0-only | Copyleft | Source must be provided |
| GPL-2.0-or-later | Copyleft | Source must be provided |
| LGPL-2.1-only | Weak Copyleft | Library source must be provided |
| LGPL-2.1-or-later | Weak Copyleft | Library source must be provided |
### Requires Review (⚠️)
| License | Reason | Action |
|---------|--------|--------|
| GPL-3.0 | Anti-tivoization clause | Legal review |
| Proprietary | Closed source | Review vendor terms |
| Binary Firmware | No source available | Check distribution rights |
### Build System (Not in Final Product)
| Component | License | Notes |
|-----------|---------|-------|
| Poky/Yocto | MIT | Build system only |
| BitBake | GPL-2.0 | Build tool only |
| OpenEmbedded | MIT | Metadata only |
---
## Key Packages for TQMa6UL
### Core System (GPL/LGPL)
| Package | Version | License | Military | Source Included |
|---------|---------|---------|----------|-----------------|
| linux-yocto | 6.6.y | GPL-2.0-only | ✅ Yes | ✅ Yes |
| u-boot-tq | 2023.10 | GPL-2.0+ | ✅ Yes | ✅ Yes |
| glibc | 2.38+ | LGPL-2.1+ | ✅ Yes | ✅ Yes |
| busybox | 1.36.x | GPL-2.0-only | ✅ Yes | ✅ Yes |
| gcc | 13.x | GPL-3.0+ | ⚠️ Review* | ✅ Yes |
*GPL-3.0 requires review of anti-tivoization clause for embedded devices
### Hardware Support
| Package | License | Military | Notes |
|---------|---------|----------|-------|
| firmware-imx | Proprietary | ⚠️ Review | NXP firmware blobs |
| linux-firmware | Mixed | ⚠️ Review | Various vendors |
| imx-gpu-viv | Proprietary | ⚠️ Review | Vivante GPU driver |
### Base System
| Package | License | Military |
|---------|---------|----------|
| systemd | LGPL-2.1+ | ✅ Yes |
| util-linux | GPL-2.0+ | ✅ Yes |
| e2fsprogs | GPL-2.0+ | ✅ Yes |
| coreutils | GPL-3.0+ | ⚠️ Review |
| bash | GPL-3.0+ | ⚠️ Review |
### Network
| Package | License | Military |
|---------|---------|----------|
| iptables | GPL-2.0+ | ✅ Yes |
| iproute2 | GPL-2.0+ | ✅ Yes |
| openssl | OpenSSL | ✅ Yes |
| openssh | OpenSSH/ISC | ✅ Yes |
| dropbear | MIT | ✅ Yes |
### Filesystems
| Package | License | Military |
|---------|---------|----------|
| mtd-utils | GPL-2.0+ | ✅ Yes |
| dosfstools | GPL-3.0+ | ⚠️ Review |
| e2fsprogs | GPL-2.0+ | ✅ Yes |
---
## Proprietary Components Requiring Review
### NXP/Freescale Components
| Component | License Type | Military Use | Source Available |
|-----------|--------------|--------------|------------------|
| imx-firmware | NXP SLA | ⚠️ Review required | ❌ No |
| imx-gpu-viv | Proprietary | ⚠️ Review required | ❌ No |
| imx-vpu | Proprietary | ⚠️ Review required | ❌ No |
| ddr-stress-test | NXP | ⚠️ Review required | ❌ No |
### Alternative Open-Source Options
Where proprietary components pose issues:
| Proprietary | Open Alternative | License |
|-------------|------------------|---------|
| imx-gpu-viv (Vivante) | etnaviv | MIT/GPL |
| NXP VPU codec | Software decode | Various |
---
## License Manifest Location
After build, license information is located at:
```
build_ut/tmp/deploy/licenses/
├── package/ # Per-package license files
├── image_license.manifest # Image-level manifest
├── host-tools_license.manifest # Host tool licenses
└── target-tools_license.manifest # Target tool licenses
```
---
## Compliance Checklist
- [ ] All GPL packages have source code archived
- [ ] Proprietary components reviewed for military clauses
- [ ] License manifest generated for every build
- [ ] No "UNKNOWN" license entries in manifest
- [ ] Commercial licenses documented separately
---
**Generated by:** Siggi ⚙️
**Project:** UT
**Date:** 2026-03-01