Designing a library interface for ipfilter...

[D***@Sun.COM]

A project I'm looking to do in my spare time at Sun is to
create a library that provides access to some of the
more useful ioctls supported by IPFilter. The problem
with relying on ioctls is that if the data structures passed
through change then often everything needs to be
recompiled.

I currently have no plans to rewrite the IPFilter tools to use
this API, rather, the parts of the API that I'm designing now
are where 3rd party people have said "we'd like to dow this
with our applications." At some point it will be possible to
write the tools to use it, but that isn't the priority here.

For obvious reasons I won't be doing this work in NetBSD
but there are some paths for someone else at NetBSD to:
- import all of the code "as is" under src/dist/libnpf (CDDL'd)
- someone else from NetBSD writes it all from scratch
- the front end gets written by someone else at NetBSD
but NetBSD imports the ipfilter bits from opensolaris
(CDDL allows this.)

The "someone else" from NetBSD will get a spec of some
sort to code against. If they were prepared to help write
and/or review the spec, even better.

Additionally, I'd like to hear if anyone would be willing to
at least do the backend work for pf on NetBSD. I'll also
be posting a similar email to the FreeBSD lists, asking for
input/thoughts there too.

Darren


--
Posted automagically by a mail2news gateway at muc.de e.V.
Please direct questions, flames, donations, etc. to news-***@muc.de

[Martin Husemann]

Post by D***@Sun.COM
- import all of the code "as is" under src/dist/libnpf (CDDL'd)

Make that pkgsrc/*/libnpf (CDDL!)

Martin

--
Posted automagically by a mail2news gateway at muc.de e.V.
Please direct questions, flames, donations, etc. to news-***@muc.de

[Bill Stouder-Studenmund]

Post by Martin Husemann

Post by D***@Sun.COM
- import all of the code "as is" under src/dist/libnpf (CDDL'd)

Make that pkgsrc/*/libnpf (CDDL!)

Why? We have GPL in-tree, and AFAICT GPL is worse than CDDL.

AFAICT, if you don't touch a CDDL file, you don't need to worry about it.

Take care,

Bill

[Martin Husemann]

Post by Bill Stouder-Studenmund
Why? We have GPL in-tree, and AFAICT GPL is worse than CDDL.

Is it?

I personally can understand GPL - but I am unable to parse even the first
10% of CDDL.

Martin

--
Posted automagically by a mail2news gateway at muc.de e.V.
Please direct questions, flames, donations, etc. to news-***@muc.de

[Bill Stouder-Studenmund]

Post by Martin Husemann

Post by Bill Stouder-Studenmund
Why? We have GPL in-tree, and AFAICT GPL is worse than CDDL.

Is it?
I personally can understand GPL - but I am unable to parse even the first
10% of CDDL.

My understanding is that CDDL is similar to the GPL in what it says about
a given file. The main issue, though, is that it ONLY applies to the
covered files; it is not viral.

Take care,

Bill

[D***@Sun.COM]

Post by Bill Stouder-Studenmund

Post by Martin Husemann

Post by Bill Stouder-Studenmund
Why? We have GPL in-tree, and AFAICT GPL is worse than CDDL.

Is it?
I personally can understand GPL - but I am unable to parse even the first
10% of CDDL.

My understanding is that CDDL is similar to the GPL in what it says about
a given file. The main issue, though, is that it ONLY applies to the
covered files; it is not viral.

Correct.

You can add new files as part of the same library or program
that is otherwise CDDL and your new files do not need to be CDDL.

Darren


--
Posted automagically by a mail2news gateway at muc.de e.V.
Please direct questions, flames, donations, etc. to news-***@muc.de

[Mindaugas R.]

Post by Martin Husemann
Is it?
I personally can understand GPL - but I am unable to parse even the first
10% of CDDL.

Yes, it's quite not bad license. In essence, CDDL is the same as GPL, just you
must preserve CDDL only for CDDL things, while GPL says that you must use
GPL for everything.
Hence, one should probably be able to use, for example, BSD and CDDL sources
in the same application.

[Lubomir Sedlacik]

Post by D***@Sun.COM
For obvious reasons I won't be doing this work in NetBSD
- import all of the code "as is" under src/dist/libnpf (CDDL'd)
- someone else from NetBSD writes it all from scratch
- the front end gets written by someone else at NetBSD
but NetBSD imports the ipfilter bits from opensolaris
(CDDL allows this.)

why do you need to release it under CDDL in the first place?


regards,

[D***@Sun.COM]

Post by Lubomir Sedlacik

Post by D***@Sun.COM
For obvious reasons I won't be doing this work in NetBSD
- import all of the code "as is" under src/dist/libnpf (CDDL'd)
- someone else from NetBSD writes it all from scratch
- the front end gets written by someone else at NetBSD
but NetBSD imports the ipfilter bits from opensolaris
(CDDL allows this.)

why do you need to release it under CDDL in the first place?

Because the work would be done by me as a Sun employee
and CDDL is what we use...sorry.

Darren


--
Posted automagically by a mail2news gateway at muc.de e.V.
Please direct questions, flames, donations, etc. to news-***@muc.de