GPL to get a makeover

06 Jan 2005 12:44


The General Public License hasn't had a proper update for 13 years, and it's starting to show its age. It looks set to be updated though, to ensure it's more in tune with today's software models and potential legal battles

Modernisation is coming to the General Public License, a legal framework that supports a large part of the free and open source software movements and that has received sharp criticism from Bill Gates.

GPL author Richard Stallman says he's working on amendments that could deal better with software patents; clarify how GPL software may be used in some networked environments and on carefully controlled hardware; and lower some barriers that today prevent the mixing of software covered by the GPL and other licences.

In the 13 years since the current GPL version two was released, the licence has moved from the fringes to the centre of the computing industry. GPL software is now common at Fortune 500 companies and endorsed by most large computing firms. But that prominence has made some eager for an update.

"The GPL has become the pivot point of a multi-billion-dollar industry. Frankly, I don't think it was designed for that," says Mark Radcliffe, an attorney with Gray Cary who has studied the GPL and other licences extensively.

For example, some would like to see clarifications that could help reduce the threat that using GPL software could entangle users in patent litigation. And the GPL could be better adapted to recent industry initiatives such as building sophisticated Web services on the Internet and boosting security through trusted computing methods.

Ordinarily only attorneys give much thought to the legal documents that govern how software may be used. But the GPL is different.

The licence is the agreement that helped show that cooperation can work in an industry dominated by competition. And the most persuasive illustration of its power is Linux, a rising threat to computing giants such as Microsoft and Sun.

The GPL governs source code. At its heart, the GPL permits anyone to see, modify and redistribute that source code, as long as they make changes available publicly and license them under the GPL. That contrasts with some licences used in open source projects that permit source code to be made proprietary.

Another requirement is that GPL software may be tightly integrated only with other software that also is governed by the GPL. That provision helps to create a growing pool of GPL software, but it's also spurred some to label the licence "viral", raising the spectre that the inadvertent or surreptitious inclusion of GPL code in a proprietary product would require the release of all source code under the GPL. Gates in particular derided the licence as "Pac Man-like", evoking an image of a GPL software module gobbling its way along and forcing the release of source code it touches.

Thus far, that scenario hasn't come to pass. The GPL, though, has threatened Microsoft in another way: It helped foster a vast, vibrant programming community.

Microsoft is keenly watching the arrival of the new GPL, which Stallman said is likely to be labelled version 3. But the company probably won't see changes to that core provision separating GPL and proprietary code.

"Overall it's going to be the same," the globe-trotting Stallman said in a telephone interview from Morocco. "I don't expect anyone releasing software under the GPL to be unhappy with the changes."

Changes aren't going to happen anytime soon, though. "We're nowhere near ready to have anything to show people anything yet. We know what we'd like to do, but how to do it is not clear," Stallman said. Only when he's good and ready will he begin seeking comments on a draft.

Stallman wrote the GPL in the 1980s as part of his GNU project to create a clone of the operating system unfettered by Unix's proprietary constraints -- thus the term "free software" and the Free Software Foundation that Stallman established to promote it.

According to Freshmeat, which calls itself "the Web's largest index of Unix and cross-platform software", there are more than 19,000 GPL-covered software projects, and the GPL governs 68 percent of projects in the Freshmeat index.

The most prominent GPL project is Linux, the kernel of an operating system that will underlie a $35.7bn business in 2008, according to a forecast by market researcher IDC. Among others: the MySQL database, the netfilter/iptables protective firewall and the Samba file-sharing software.

But programmers have other choices if they're not happy with the GPL. Other licences cover the Mozilla project, which helped launch the open source movement in 1998, and the widely used Apache server software. And Sun is testing its Community Development and Distribution License, which likely will be used to govern its Solaris version of Unix.

The patent problem
Patents are one reason Sun chose the licence it did. How the GPL deals with that thorny legal area is the issue more than a dozen experts raised most often in discussions for this story.

The patent problems boil down to two issues. First, should the licence explicitly require those who distribute GPL software to grant others unhindered use of whatever patented technology is involved in that software? And second, should there be some form of punishment for those who file lawsuits alleging that GPL software infringes their patents?

These issues are under discussion for the next version of the GPL. "It may possibly help protect our community from pirates armed with patents," says Stallman, a critic of the overall idea of software patents.

One interpretation of the current GPL is that patent holders who distribute GPL software "are in effect granting an implied licence" to those patents, says Mark Webbink, the lead intellectual-property attorney for Red Hat and a person who first saw revised GPL drafts in 2000. But it might be useful to have an explicitly expressed patent agreement, he said. "A distributor may not want to leave that ambiguous as to what rights they are giving."

Frank Bernstein, an attorney with Sughrue Mion, suggests Stallman look for inspiration to the Apple Public Source License and the Common Public License IBM often uses. Both grant a licence to use patents covering the software, and when it comes to organisations that sue for patent infringement, both licences terminate their rights to use and distribute the software.

Bernstein says addressing patents could make the GPL more palatable among corporations -- users that have become major contributors to, and customers of, open source software.

But some would like to see the GPL be more of a political tool to overturn the idea of software patents. "We need to find some way to monkey-wrench the awful, broken software-patent oligopoly before it does more serious damage," says Eric Raymond, president of the Open Source Initiative. "If GPL [version] 3 can help do that, it would be extremely valuable."

And Bruce Perens, an open source advocate, would like to see damages for a patent-infringement suit extended to prohibit use not just of the software in question but of all programs classified as free software. "I would like to see the next issue of the GPL include a mutual-defence clause regarding patents, such that if you enforce a patent against any free software, your rights to use free software terminate," Perens says.

A middle ground is possible, Linux seller Novell said in a statement. "Intellectual-property protection and open source can work hand in hand and are not mutually inconsistent," the company says.

Other changes
Stallman listed several other areas where modifications are under way:

Stallman isn't the only one looking for improvements.

Martin Fink, vice-president of Linux at HP, has been grappling with some thorny GPL issues. One problem he foresees -- related to the TiVo issue Stallman raises -- is integration with the "trusted computing" technology under development.

Trusted computing
Among other things, trusted computing is designed to permit execution only of software that has been cryptographically signed -- but that signature process could be at odds with the goals of sharing and modification at the heart of the GPL, Fink says.

Another specific hitch is that the GPL isn't clear about what exactly "distribution" means, Fink says. How should GPL software be treated that's distributed from a corporation to a subsidiary? Or from one machine to another as the program executes? "We're dealing in a world where a program entity is not confined to a machine. You can have bits and parts of a program that are highly distributed," Fink says, as in the widely embraced Web services concept.

Attorney John Ferrell of Carr & Ferrell would like to see a better indication of the use of derivative works -- software based on the original GPL product. Is it a derivative work to include a GPL component unmodified as part of a larger software suite?

Derivative works, copyrights and other concepts are central to the GPL but those concepts vary by country and state. Radcliffe of Gray Cary would prefer precise definitions that are more absolute.

GPL improvements are crucial to the open source software realm, Fink says. Improvements could help the licence become more popular and better understood, which in turn would mean a larger body of GPL software that could be shared among projects.

"I'm trying to stop people from creating new licences," Fink says. "To the extent we can create a licence that has a broader buy-in, that stops proliferation of more licences, that to me is goodness."

Story URL: http://news.zdnet.co.uk/software/0,1000000121,39182222,00.htm

Copyright © 1995-2008 CNET Networks, Inc. All rights reserved
ZDNET is a registered service mark of CNET Networks, Inc. ZDNET Logo is a service mark of CNET Networks, Inc.