249310c0e2
The linux-firmware package contains 70+ vendor-specific firmware licenses. Added footnote explaining this and pointing to CSV/WHENCE for full details. Both technically correct (CSV unchanged) and readable (footnote).
3.4 KiB
3.4 KiB
License Compliance Summary – UT Project
Project: UT
Target: TQMa6UL Yocto BSP (spaetzle/musl)
Date: 2026-03-01
Data Source: bitbake -e extraction, 264 packages
Full Table: UT-license-table.csv
License Categories
Approved for Military Use (✅)
| License | Type | Count | Notes |
|---|---|---|---|
| MIT | Permissive | 41 | No restrictions |
| BSD-2-Clause | Permissive | 7 | No restrictions |
| BSD-3-Clause | Permissive | 19 | No restrictions |
| Apache-2.0 | Permissive | 2 | Patent grant included |
| GPL-2.0-only | Copyleft | 32 | Source must be provided |
| GPL-2.0-or-later | Copyleft | 22 | Source must be provided |
| LGPL-2.1-only | Weak Copyleft | 8 | Library source required |
| LGPL-2.1-or-later | Weak Copyleft | 6 | Library source required |
Requires Legal Review (⚠️)
| License | Count | Reason |
|---|---|---|
| GPL-3.0-only | 11 | Anti-tivoization clause |
| GPL-3.0-or-later | 13 | Anti-tivoization clause |
| Proprietary | 2 | Closed source (NXP firmware) |
Build-Only (Not in Final Product)
Native/cross-build tools (GCC, CMake, Python, etc.) are only used during compilation and are NOT deployed to the target device.
Key Packages (verified from CSV)
Core System
| Package | Version | License | In Image |
|---|---|---|---|
| linux-tq | 6.6.102+git | GPL-2.0-only | ✅ |
| u-boot-tq | 2023.04 | GPL-2.0-or-later | ✅ |
| musl | 1.2.4+git | MIT | ✅ |
| busybox | 1.36.1 | GPL-2.0-only | ✅ |
Network & Security
| Package | Version | License | In Image |
|---|---|---|---|
| openssl | 3.2.4 | Apache-2.0 | ✅ |
| openssh | 9.6p1 | BSD-2/3-Clause & ISC & MIT | ✅ |
| dropbear | 2022.83 | MIT & BSD | ✅ |
| iptables | 1.8.10 | GPL-2.0-or-later | ✅ |
| iproute2 | 6.7.0 | GPL-2.0-or-later | ✅ |
Utilities
| Package | Version | License | In Image |
|---|---|---|---|
| util-linux | 2.39.3 | GPL/LGPL/BSD mixed | ✅ |
| coreutils | 9.4 | GPL-3.0-or-later | ⚠️ Review |
| bash | 5.2.21 | GPL-3.0-or-later | ⚠️ Review |
| e2fsprogs | 1.47.0 | GPL-2.0 & BSD & MIT | ✅ |
| mtd-utils | 2.1.6 | GPL-2.0-or-later | ✅ |
Proprietary (Review Required)
| Package | Version | License | Notes |
|---|---|---|---|
| firmware-imx | 8.27 | Proprietary (NXP SLA) | NXP firmware blobs |
| firmware-nxp-wifi | 1.1 | Proprietary (NXP) | WiFi firmware |
| linux-firmware | 20240909 | Mixed (70+ vendor licenses)¹ | Various vendor firmware blobs |
Note:
imx-gpu-viv,imx-vpu,systemdare NOT in this build (spaetzle/musl does not include GPU drivers or systemd).¹ The
linux-firmwarepackage contains firmware blobs from 70+ hardware vendors (AMD, Intel, Broadcom, NXP, Realtek, etc.). Each blob has its own license — see the CSV column "License" for the complete list or theWHENCEfile in the package for details.
Compliance Checklist
- All 264 packages identified with license (CSV)
- Download URLs resolved for 224 packages (85%)
- Proprietary components identified (2 packages)
- GPL-3.0 anti-tivoization clause reviewed by legal
- NXP firmware license terms verified for deployment use
- License manifest generated from actual build output
Author: Siggi ⚙️