Bug 2121198 - Verify SPDX license identifiers
Summary: Verify SPDX license identifiers
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: rpmlint
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Tom "spot" Callaway
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2022-08-24 19:15 UTC by Vít Ondruch
Modified: 2022-10-08 01:00 UTC (History)
7 users (show)

Fixed In Version: rpmlint-2.2.0-7.fc38 rpmlint-2.4.0-2.fc38
Clone Of:
Environment:
Last Closed: 2022-10-08 01:00:52 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Gitlab fedora/legal fedora-license-data issues 65 0 None opened Produce an rpmlint licenses.toml file for rpmlint policy 2022-08-31 12:45:39 UTC

Description Vít Ondruch 2022-08-24 19:15:05 UTC
Description of problem:
Fedora moved to SPDX identifiers [1], therefore it would be nice if rpmlint verified them.


Version-Release number of selected component (if applicable):
$ rpm -q rpmlint
rpmlint-2.2.0-6.fc38.noarch



How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:
~~~
$ rpmlint /var/lib/mock/fedora-rawhide-x86_64/result/rubygem-apipie-rails-0.8.1-1.fc38.noarch.rpm 
============================ rpmlint session starts ============================
rpmlint: 2.2.0
configuration:
    /usr/lib/python3.11/site-packages/rpmlint/configdefaults.toml
    /etc/xdg/rpmlint/fedora.toml
    /etc/xdg/rpmlint/licenses.toml
    /etc/xdg/rpmlint/scoring.toml
    /etc/xdg/rpmlint/users-groups.toml
    /etc/xdg/rpmlint/warn-on-functions.toml
checks: 32, packages: 1

rubygem-apipie-rails.noarch: W: no-documentation
rubygem-apipie-rails.noarch: W: invalid-license Apache-2.0
 1 packages and 0 specfiles checked; 0 errors, 2 warnings, 0 badness; has taken 0.1 s 
~~~


Expected results:
Apache-2.0 is not reported as invalid


Additional info:


[1] https://lists.fedoraproject.org/archives/list/devel-announce@lists.fedoraproject.org/thread/6GKXXE7AMBB76IBRMCTU3L57GLCCZL55/

Comment 2 Todd Zullinger 2022-10-08 01:00:52 UTC
This was recently fixed (twice, no less):

2beb193 (update licenses.toml to reflect change in Fedora licensing identifiers, 2022-09-24) - rpmlint-2.2.0-7.fc38
9c506b5 (remove the license list, depend on rpmlint-fedora-license-data instead, 2022-10-05) - rpmlint-2.4.0-2.fc38

Both the old and the new license formats should work now.  Eventually, the legacy identifiers will be phased out and rpmlint will pick up the change via the canonical fedora-license-data source.


Note You need to log in before you can comment on or make changes to this bug.