<div dir="ltr"><div>Yes, I see that could be a valid concern. Is this a sign that poky needs per-package LIC_FILES_CHKSUM variables the same way each package can set different LICENSE values? I would like to continue to use Yocto to collect licenses for compliance reasons, but in this case I am getting an incorrect license file in my image. In my configuration, I am placing "GPLv3" in INCOMPATIBLE_LICENSES. Is there any way to use this information at rootfs time to exclude GPLv3 licenses from being collected? Do you have any recommendations for how I should proceed with collecting accurate licenses in my image?</div><div><br></div><div>Thanks for your help,</div><div>Wes L<br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Aug 16, 2019 at 4:50 PM Khem Raj <<a href="mailto:raj.khem@gmail.com">raj.khem@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">On Fri, Aug 16, 2019 at 12:46 PM Wes Lindauer <<a href="mailto:wesley.lindauer@gmail.com" target="_blank">wesley.lindauer@gmail.com</a>> wrote:<br>
><br>
> Although xz has some files that are GPLv3 licensed, none of them get<br>
> packaged up, and therefore none of it ends up in the final rootfs. Since<br>
> there is no GPLv3 code in the final image, we don't want to include it<br>
> when we collect licenses, as that would give the incorrect impression<br>
> that the image contains GPLv3 code.<br>
<br>
We will be distributing this in src packages though. Maybe these files<br>
should be deleted before the build even starts.<br>
><br>
> Also fixes the endline for getopt.c which had a couple of non-license<br>
> text lines at the bottom.<br>
> ---<br>
> meta/recipes-extended/xz/<a href="http://xz_5.2.4.bb" rel="noreferrer" target="_blank">xz_5.2.4.bb</a> | 3 +--<br>
> 1 file changed, 1 insertion(+), 2 deletions(-)<br>
><br>
> diff --git a/meta/recipes-extended/xz/<a href="http://xz_5.2.4.bb" rel="noreferrer" target="_blank">xz_5.2.4.bb</a> b/meta/recipes-extended/xz/<a href="http://xz_5.2.4.bb" rel="noreferrer" target="_blank">xz_5.2.4.bb</a><br>
> index 791746e1cf..e6725e5f12 100644<br>
> --- a/meta/recipes-extended/xz/<a href="http://xz_5.2.4.bb" rel="noreferrer" target="_blank">xz_5.2.4.bb</a><br>
> +++ b/meta/recipes-extended/xz/<a href="http://xz_5.2.4.bb" rel="noreferrer" target="_blank">xz_5.2.4.bb</a><br>
> @@ -17,9 +17,8 @@ LICENSE_liblzma = "PD"<br>
><br>
> LIC_FILES_CHKSUM = "file://COPYING;md5=97d554a32881fee0aa283d96e47cb24a \<br>
> file://COPYING.GPLv2;md5=b234ee4d69f5fce4486a80fdaf4a4263 \<br>
> - file://COPYING.GPLv3;md5=d32239bcb673463ab874e80d47fae504 \<br>
> file://COPYING.LGPLv2.1;md5=4fbd65380cdd255951079008b364516c \<br>
> - file://lib/getopt.c;endline=23;md5=2069b0ee710572c03bb3114e4532cd84 \<br>
> + file://lib/getopt.c;endline=21;md5=32575ca1a42c5fa04aac6f08566ddf48 \<br>
> "<br>
><br>
> SRC_URI = "<a href="http://tukaani.org/xz/xz-$%7BPV%7D.tar.gz" rel="noreferrer" target="_blank">http://tukaani.org/xz/xz-${PV}.tar.gz</a>"<br>
> --<br>
> 2.14.5<br>
><br>
> --<br>
> _______________________________________________<br>
> Openembedded-core mailing list<br>
> <a href="mailto:Openembedded-core@lists.openembedded.org" target="_blank">Openembedded-core@lists.openembedded.org</a><br>
> <a href="http://lists.openembedded.org/mailman/listinfo/openembedded-core" rel="noreferrer" target="_blank">http://lists.openembedded.org/mailman/listinfo/openembedded-core</a><br>
</blockquote></div>