Bug 743072

Summary: Attribution not done on Security Guide
Product: Red Hat Enterprise Linux 6 Reporter: eric
Component: doc-Security_GuideAssignee: Martin Prpič <mprpic>
Status: CLOSED CURRENTRELEASE QA Contact: ecs-bugs
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 6.0CC: jsmith.fedora, rfontana
Target Milestone: rcKeywords: Documentation
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-06-25 10:07:02 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description eric 2011-10-03 18:40:34 UTC
Description of problem: The RHEL 6 Security Guide contains information that was taken from the Fedora Security Guide but attribution was not provided as per the CC BY-SA license.


Version-Release number of selected component (if applicable): 1.5


Expected results: Attribution to the Fedora Documentation Project or to the authors of the materials contained within.

Comment 1 eric 2011-10-03 18:46:55 UTC
Much of chapters 3 through 7 were created by myself and others within the Fedora Project.

Comment 3 eric 2011-10-03 19:22:45 UTC
Sorry, to clarify...

Chapters 3 through 7 were pulled from various Fedora sources (wiki and the old Encryption Guide) and Fedora contributors, including myself, over the period of time beginning around 2008.  Many Red Hat writers were also involved in the creation of this text.

Specifically, the GnuPG, LUKS, and hardening sections, among others, came from Fedora sources.

It appears that the RHEL 6 Security Guide took a snapshot of the Fedora Security Guide, re-branded it, and removed a few chapters that didn't fit into the scope of RHEL, and removed all attribution to the contributors.

Comment 4 Richard Fontana 2011-10-03 21:24:53 UTC
Whether there is a real legal issue here (given the timing of events) is a complex and probably academic question, but we should do the right thing nonetheless. Here's my suggested correction:

Where we have

Legal Notice

  Copyright © 2011 Red Hat, Inc. 

  [followed by boilerplate]

Change to:

Legal Notice

   Copyright © 2011 Red Hat, Inc. and others.
  
   Based on the Fedora Security Guide (current version at    
   http://docs.fedoraproject.org/en-   US/Fedora/14/html/Security_Guide/index.html),
   written by Johnray Fuller, Eric Christensen, Adam Ligas, and other Fedora Project contributors.
 
   [followed by boilerplate]

I'm omitting the names of Red Hat Content Authors in this suggestion since I presume they were (perhaps constructively) aware of and did not mind the fact that their names were not included.

Comment 7 Martin Prpič 2012-06-25 10:07:02 UTC
Fix available on docs.redhat.com. Closing!