Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror
×
Software Linux

VMware May Violate Linux Copyrights 443

Nailer writes "Bloomberg believe VMware's IPO today may the largest technology offering since Google. But doubts have been cast over the company's supposedly proprietary ESX product, as top 10 Linux contributor Christopher Hellwig claims the software may violate Linux kernel copyrights. 'Is Hellwig right, and is VMware a derived product of Linux? Unless vmkernel can be loaded without the Linux kernel, it would appear so. VMware was developed from another, long ago OS created as a research project, but it's unclear whether vmkernel was ported from that OS or rewritten as the Linux-requiring binary blob. What's more of an issue is that VMware had these serious questions posed directly to them a year ago, repeated in a public forum many times since, but have yet to respond at all.'"
This discussion has been archived. No new comments can be posted.

VMware May Violate Linux Copyrights

Comments Filter:
  • by Silver Sloth ( 770927 ) on Tuesday August 14, 2007 @01:44PM (#20227105)
    Try reading TFA

    Looking at an ESX server, you'll find what looks like a Linux OS. This isn't a secret - VMware call this the 'console OS'. Is ESX server based on Linux? The VMware ESX FAQ provides an answer:

    'Q. Does ESX Server Run on Linux? On Windows?
    A. ESX Server runs natively on server hardware, without a host operating system.

    Ok, so ESX doesn't need a host OS. It's pretty clear that ESX installs directly on the hardware without needing Windows, Linux or any other OS installed first - ESX itself is the OS. The question then is whether the ESX OS is based on Linux.
    To reitterate

    The question then is whether the ESX OS is based on Linux
  • Don't forget:
    • Omit actual details in favor of baseless speculation.
    This is how you optimize FUD: keep the claims mysterious. SCO kept up this strategy for, what, 4 or 5 years?
  • by langelgjm ( 860756 ) on Tuesday August 14, 2007 @01:50PM (#20227173) Journal
    Whether or not VMWare violates Linux copyrights, the mere fact that this is being discussed may add to the perception of the GPL as a "viral" license, and steer developers/businesses away from using Linux and other GPL software in their products.
  • Uh, what? (Score:5, Insightful)

    by TheRaven64 ( 641858 ) on Tuesday August 14, 2007 @02:00PM (#20227297) Journal
    The article has some interesting comments. One is:

    So according to VMware ESX actually has two kernels - the vmkernel, and a Linux kernel. This sounds a bit odd, given a computer can only run one kernel at a given time - otherwise which one determines who gets access to the CPU, memory, and other hardware?
    Perhaps the writer is missing the point of having a hypervisor, which is (drum roll) to allow two kernels to run at once.

    The license for the Linux kernel is quite different to the licensing for DOS that allowed Netware to use it for a bootloader.
    The license for Linux only applies if you are distributing Linux (fair enough, they are), and only applies to Linux and code which is a derived work of Linux. It does not apply, for example, to binary-only applications running on Linux and using system calls. Linux includes the kexec system call, which allows the running kernel image to be replaced with another, effectively making Linux into a bootloader. This was originally written as part of the Linux BIOS project, to allow Linux to be used as (another drum roll please) a bootloader.

    Linus Torvalds (the copyright holder for the Linux kernel)
    Not even close. Linux owns copyright on some small parts of the kernel, but does not require copyright assignment, and so these days much of the copyright is owned by other people (not relevant, but yet another error).

    Is Hellwig right, and is VMware a derived product of Linux?
    Hellwig is a troll.

    Unless vmkernel can be loaded without the Linux kernel, it would appear so.
    Rubbish. Interfaces can not be copyrighted. It is only a derived work if it is not isolated from the kernel via a public interface. From the description in the 'article,' it sounds like:
    1. Linux boots.
    2. Userspace tool kexec's the hypervisor (an odd way of doing things, so I wouldn't be surprised if this isn't actually what happens).
    3. The Linux kernel continues to run in a VM, providing an admin UI and drivers to the other guests, just as it does with Xen.
    Looking at the patches that the VMWare guys have been sending in for hypervisor support, it seems like step three, at least, is accurate. Xen does the following in a typical install:
    1. Linux is installed, with a Xen-compatible kernel.
    2. User reboots.
    3. Xen Hypervisor boots.
    4. Xen Hypervisor loads a Linux (or NetBSD or Solaris, or Windows with Xen Enterprise) domain 0 (privileged) guest, which runs the (userspace) management tools and provides device drivers.
    There has, I believe, been some work done making Xen boot using kexec from Linux, so you can skip step 2 if you want. If you do this, then you get exactly the same set of steps as VMWare ESX.

    Now, to be fair, Xen actually does include some code (stuff like atomic operations, for example) from Linux (and is GPL'd, making this a non-issue), but this was done to save time, rather than because the code has to come from Linux.

  • by an.echte.trilingue ( 1063180 ) on Tuesday August 14, 2007 @02:06PM (#20227399) Homepage

    It would seem the GPL is "viral". Why do you think it is not?
    One big clue is that people who claim that the GPL is "viral" have to put "viral" in quotation marks to obfuscate the meaning of the word "viral".
  • by gstoddart ( 321705 ) on Tuesday August 14, 2007 @02:14PM (#20227511) Homepage

    Whether or not VMWare violates Linux copyrights, the mere fact that this is being discussed may add to the perception of the GPL as a "viral" license, and steer developers/businesses away from using Linux and other GPL software in their products.

    See, whether or not it's "viral" and whether you get to use Linux and other GPL software "in your products" depend entirely on what kind of software it is and what you're doing with it.

    If you merely took Linux code (which is copyrighted) and incorporated it into your product, you've just swiped code -- which, oddly enough, is illegal under the law and the not provided for in the license. If it was LGPL and you can link to it, then you can make it as part of your product since it is just plumbing.

    Nobody is saying you can't write your own closed-source application which runs on top of Linux. But, you don't get to steal parts of Linux or anything else under the GPL and pass it off as yours -- that's just plain old copyright violation. There's no blanket exemption to re-use it any way you choose; you must adhere to the license granted to you.

    So, if someone wrote software based on Linux and find themselves running afoul of the GPL, it's likely not because GPL code is 'viral', it's that you tried to steal code you had no right to. Which is entirely different from this whole 'viral' talk.
    u
    What companies need is an occasional reminder that they specifically can't just incorporate Linux and other GPL code "into their products" any way they choose. It just doesn't work that way. As an end user, you can make use of GPL'd software until you're blue in the face with pretty much no obligations. As a company, you can't just take parts of it without any consequences. It's not a public domain code repository to pillage to your heart's content -- it's Open Source (TM), and there are rules about what you can and can't do with it.

    I'm not sure that steering "developers/bsinesses away from using Linux and other GPL software in their products" is anywhere near as bad as you're thinking it might be.

    Cheers
  • 1. It details information that is from an older and nearly 2.5 year old revision of the Product. The Current Version is 3.0.x and the relationship of the Linux system and the VMKernel has changed substantially.

    2. VMWare licenses the Implimentation of Linux used in ESX from Red Hat, however nowhere is that mentioned in the Article.
  • by vrmlguy ( 120854 ) <samwyse&gmail,com> on Tuesday August 14, 2007 @02:23PM (#20227633) Homepage Journal
    Go read this article (http://hardware.slashdot.org/article.pl?sid=07/08 /09/171248 [slashdot.org]) from last week and note that Dell apparently will be booting a version of ESX from BIOS. If ESX can be booted with an alternate bootloader, it must not be that closely tied to RedHat.
  • Re:Old news? (Score:2, Insightful)

    by Cyrano de Maniac ( 60961 ) on Tuesday August 14, 2007 @02:23PM (#20227639)

    It can't run without Linux, so that makes it a derived work.

    That is simply incorrect.

    By your statement any userland program that made use of Linux-only interfaces (e.g. hugetlbfs, most anything in /proc or /sys, video4linux devices, etc) would also be a derived work, which is obviously not the case. Even within the realm of kernel-internal interfaces, it is difficult to argue that a derived work is created by using interfaces whose function and calling requirements you understand without needing to know the specifics of the implementation (though this seems to be the thrust of the thinking behind EXPORT_SYMBOL_GPL).

    Personally I would argue that nothing short of code-copying creates a derived work, but other intelligent people hold contrary views. I'm waiting for the day that someone wakes up to the fact that the whole EXPORT_SYMBOL* nonsense is at its heart a form of Digital Restrictions Management. Not that closed-source modules haven't caused me rare moments of headache, but in this case the cure seems more repugnant than the ailment.

  • Re:Old news? (Score:2, Insightful)

    by morgan_greywolf ( 835522 ) on Tuesday August 14, 2007 @02:25PM (#20227679) Homepage Journal
    My point is that there is a difference between using an OS as a bootloader and integrating an OS kernel with another one. There is precedence for the former (Novell Netware) and also for the latter (Windows 3.x/9x/Me). Linux doesn't integrate with the BIOS. It doesn't need it, it can be loaded with ANYTHING that bootstraps into the kernel. ESX Server seems to require a poorly hacked Linux 2.4 kernel. Nothing else can boot it. That's the difference.
  • by ExE122 ( 954104 ) * on Tuesday August 14, 2007 @02:27PM (#20227707) Homepage Journal
    I found this article to be nothing more than a poorly written rant of an opinion piece. Especially ridiculous were the Karl Rove tactics in which the author tried to "clarify" quotes by adding some text in parenthesis to reinforce his point. Example:

    I personally consider anything a "derived work" that needs special hooks in the kernel to function with Linux (i.e., it is not acceptable to make a small piece of GPL-code as a hook for the larger piece), as that obviously implies that the bigger module needs "help" from the main kernel.
    ~Linus Torvalds 19 Oct 2001
    Well let's ignore the "i.e." that I don't think Torvalds actually spelled out and read what this really is saying...

    I personally consider anything a "derived work" that needs special hooks in the kernel to function with Linux, as that obviously implies that the bigger module needs "help" from the main kernel.
    Well that's nice and all, but we need to keep in mind is that the kernel in question, Linux 2.4, was released in 2002. That means it fall under Version 2 of the GPL which, as far as I can tell, says that software is "derived" only if it includes GPL source code or it is linked with a GPL library. As far as I can tell, there is nothing in there that matches LT's "opinion" stated above.

    I think Christopher Hellwig put it best:

    I unfortunately don't have enough copyrights on that particular version to sue them.
    Exactly. Linux would've pushed legal action by now if they thought it would get them anywhere. The defense rests, end of story. So what is the point of this article? To whine about how unfair this is? Ok, maybe. But such is life.

    --
    Capitalism: When it uses the carrot, it's called Democracy. When it uses the stick, it's called fascism.
  • by fishbowl ( 7759 ) on Tuesday August 14, 2007 @02:28PM (#20227723)
    >So what? Who cares? Forcing people to GPL all the code which uses functionality "derived" from GPL code is a feature of
    >the GPL.

    It's more than that. It is the right of the copyright holder.

    What is being alleged is that a corporation is abridging the rights of one or more individuals. The suggestion (raised several times already in this thread) that this should be overlooked because of their community affiliations, is preposterous.
  • by cortana ( 588495 ) <sam@[ ]ots.org.uk ['rob' in gap]> on Tuesday August 14, 2007 @02:31PM (#20227789) Homepage
    Hold on a second... you are talking about both Linux (the kernel) and Linux (the platform, which does not in fact exist). Which do you mean?

    If you are talking about the kernel, then you should read the COPYING [kernel.org] file: if your work is a derived work of the Linux kernel, then it must be released under the GPL. If it is not a derived work of the kernel then you can do whatever you want.

    If you are talking about one of the many platforms based on Linux (e.g., RHEL, Debian GNU/Linux, etc) then you must consider the licensing terms of every work which you derive from (e.g., the GNU C Library, GTK+).

    I harken back to the days of Netware NLMs. Netware didn't seem to want some sort of ownership for people loading things onto their kernel, nor did Microsoft demand rights for people distributing TSRs. So why is this different?
    And look where it got them. Well, I have no idea if Netware is still alive and/or relevant today, but the sheer number of crappy proprietary drivers written by two bit hardware companies has locked them to the shitty old i386 architecture, and it looks like this will continue to be the case for decades to come.

    BTW, I must correct your implied assertion that the free software community wants "ownership" of a vendor's code. This is not the case! We merely want vendors to respect the licensing terms of any works from which they create a derivative work.
  • Copyright is viral (Score:4, Insightful)

    by swillden ( 191260 ) * <shawn-ds@willden.org> on Tuesday August 14, 2007 @02:52PM (#20228159) Journal

    It would seem the GPL is "viral". Why do you think it is not?

    The GPL is not viral. Copyright is viral. You can't take any copyrighted work and incorporate it into a new work of your own without permission from the copyright holder (excepting Fair Use). The work you incorporated "infects" your work.

    Copyrighted work distributed under the GPL is different only in that it does give permission for creation of derivative works, given certain limitations. If you don't want to comply with the license, don't incorporate GPL'd code into your software. Go buy some commercial code and use that instead -- but be sure to comply with the terms of that license, because "viral" copyright will burn you if you don't. Or, if you prefer, you can write your own code so you don't need a license at all.

    This is not rocket surgery. It's not even the slightest bit confusing, except when made deliberately so by FUDsters.

  • Re:Old news? (Score:3, Insightful)

    by russotto ( 537200 ) on Tuesday August 14, 2007 @03:38PM (#20228897) Journal
    By the standards of "derivative work" many purists would like to impose, any program written for Windows is a derivative work thereof, and therefore requires the permission of Microsoft to distribute.

    IMO, a derivative work has to include some significant* part the work from which it is derived, not merely reference it. But I don't have a team of lawyers to back up that opinion, alas.

    *by which I mean things like the names of API functions aren't sufficient.
  • by Anonymous Coward on Tuesday August 14, 2007 @04:06PM (#20229269)
    I don't know for sure, but if you look at the ESX hardware compatibility list it's quite limited. Which suggests that ESX isn't using Linux drivers; otherwise it would have much broader hardware support.
  • by Anonymous Coward on Tuesday August 14, 2007 @04:57PM (#20229955)
    And that is the base issue... running on linux... derived from linux... either way they have to show the code.

    No.

    Derived from Linux source code = Have to show the code
    Running on Linux = whatever you want to do
    Derived from linux concepts (commands, interfaces, etc) or using linux API's = whatever you want to do

    Please don't spread rediculous misconceptions about what the GPL forces to be free, it hurts the GPL movement because people will avoid it for fear its will "infect" their code, I had to get our lawyers sign off that checking our proprietary code into the GPL'd CVS would not force our code to be GPL; arguements that using Open Office make your term paper GPL or that somehow the ability to run Halo under WINE means you have a right to the source code is the type of anti-GNU FUD MS wants to spread.

  • by Metzli ( 184903 ) on Tuesday August 14, 2007 @05:27PM (#20230263)
    An assertion is made that VMware infringes on Linux-related copyrights held by others, but no concrete proof has been shown. Why should they have to disprove an as-yet unproven allegation, regardless of who made it? When SCO made a statement about Linux without concrete proof, the overriding opinion was "Prove it." Why wouldn't the same standard be applied to someone making a statement about VMware? Shouldn't they be given the assumption of innocence until proven guilty?

    I'm not saying they infringed and I'm not saying they didn't, as I honestly don't know. Regardless, shouldn't the impetus on the accuser to prove their case?
  • by amorsen ( 7485 ) <benny+slashdot@amorsen.dk> on Tuesday August 14, 2007 @05:39PM (#20230397)
    Under that logic almost all FSF software would be the property of Sun, AT&T, HP, IBM, etc. since for a long time it required SunOS, Solaris, HP/UX, AIX to run on.

    FSF did not distribute SunOS, Solaris, HP/UX etc. and therefore they were not bound by those licenses. The same applies to say NVIDIA, since they don't distribute GPL-covered software either. VMWare has no such luck -- they distribute both GPL-covered and proprietary software, and they even do it on the same CD. Now, the GPL could have outright forbidden this "mere aggregation", which would obviously have been completely enforceable. Instead, the GPL allows shipping both on the same media -- but only if both pieces work independently of each other. And the VMWare hypervisor seems to not work without the Linux kernel. Whoops.
  • by Tony Hoyle ( 11698 ) <tmh@nodomain.org> on Tuesday August 14, 2007 @06:19PM (#20230791) Homepage
    libraries are okay because they're just linked

    Incorrect. You *cannot* link a GPL library into a non-gpl app. Check with your lawyers. Seriously..
  • Re:Derived Works (Score:3, Insightful)

    by vrmlguy ( 120854 ) <samwyse&gmail,com> on Tuesday August 14, 2007 @06:43PM (#20230995) Homepage Journal
    Not true. First, Linus decides what isn't a derived work everytime he decides not to sue somebody. Linux is his creation, and only he has legal standing to sue. Congress could pass any law it wanted defining "derived works" and as long as Linus does nothing, no one else is allowed to sue anyone for infringement. Second, Linus can decide to sue, in which case the courts, not Congress, decides if his arguments have merit. Congress frequently passes laws that the courts promptly strike down; Slashdot readers frequently cheer when this happens.
  • He could have run the vmkmod module through a disassembler and compared it to parts of the Linux binary. It takes a lot of effort, but you can show that actual code has been copied that way, which is really what matters.

    So you didn't actually read the article? The problem is not copied code: it's the use of a binary-only module which links to and requires the Linux kernel to boot the ESX server. According to Linus' guidance, this steps over the line into an area where binary modules can't be used. The iSCSI component developer is refusing to let ESX use any of his code until they answer questions about how the ESX kernel module interacts with the Linux kernel.
  • by cduffy ( 652 ) <charles+slashdot@dyfis.net> on Tuesday August 14, 2007 @08:23PM (#20231759)
    Nuh-uh -- read the license before you spout off.

    Static linking implies derivation, because the executable contains code from the library as well as the covered program. Shared library linkages only imply derivation if the program in question is written to use an interface which is specific to the covered program -- so the standard C library does not apply. It makes sense: If I'm writing to the libgnome API, I'm creating a product which would not possibly work without libgnome. If I'm writing to the standard C API, I'm creating something which works with all manner of standard C libraries; if my code happens to be dynamically linked against a GPLed C library implementation, that doesn't change the fact that that code was not in any way written with knowledge of the specific implementation.

    The GPL, taken literally, can be reasonably complied with.
  • by sarathmenon ( 751376 ) <(moc.nonemhtaras) (ta) (mrs)> on Tuesday August 14, 2007 @10:54PM (#20232671) Homepage Journal

    You're an idiot. If it is running on Linux, THEY STILL have to pony up the kernel code (and code for any other GPL code they distribute). Modified or not.
    You're one hell of a troll, still here's the deal. Read the very first line of this license [kernel.org] and atleast try to understand what that means.
  • by cduffy ( 652 ) <charles+slashdot@dyfis.net> on Tuesday August 14, 2007 @11:35PM (#20232897)

    Says the FSF. Which Federal Court agrees with them?
    About what?

    Agrees that writing software against a different program's API implies derivation? No court, but it's a pretty damned easy argument to make, at least for programs written in C and C++ (and other languages where libraries' headers are included during a precompilation phase): You're writing your code the way you do only because of the external API being structured the way it is, and would not write your code that way otherwise. Moreover, structures and values from the API's header files are copied into your source during precompilation. There may not be settled precedent -- but in a precedent-setting case, this would be a favorable side to be on.

    Agrees that writing software against a standard API doesn't imply derivation from any specific implementation of that API? Well, duh. If you statically link your code with that implementation to generate a binary, that binary certainly is a derivative work -- but if you're doing dynamic linking, your generated binary does not contain any portion of the work (other than the structures &c. from the header -- but because those are generated to conform with the 3rd-party API, there's no creative [and thus no copyrightable] element in them), and your source neither contains any portion of the work or is influenced in any way individually traceable back to the work.

    The FSF's position may not have been fully validated by case law, but it is a very reasonable interpretation, prone to being effectively argued in court. Remember that to a significant extent, the reason there is relatively little case law regarding the FSF's interpretation of their licenses is that offending parties whom the FSF has communicated with almost universally settle.
  • by Nefarious Wheel ( 628136 ) * on Wednesday August 15, 2007 @03:18AM (#20233761) Journal
    Oh my, do we really want this? Microsoft is spending hugely on their own Virtual Server range and we want to put road blocks in front of VMWare?
  • by Nailer ( 69468 ) on Wednesday August 15, 2007 @04:23AM (#20233993)
    >> VMkernel does not run on Linux kernel.
    >> Please, let me reiterate this again: VMKernel DOES NOT RUN ON Linux.

    RTFA. According to everyone, including VMware, vmkernel is started from Linux.

    The article has been updated to include a video of an ESX machine booting.

    Run 'strings' on the 'vmnix' kernel on your machine (or just watch it boot). It's Linux. Nobody hides this fact.
    As TFA mentions, vmkernel is started by S90vmware, which insmods vmkmod to load it.

Happiness is twin floppies.

Working...