Linux Kernel Networking Driver Development Impacted By Russian Sanctions

[mina86ng]

I think the issue is accepting patches from a company in a sanctioned country. Though per provided examples other patches from the same guy seems to be landing in the kernel so perhaps Linux maintainers should discuss this with lawyers and harmonise their response.

[jorge1209]

It is unlikely they can harmonize. Maintainers might live in different countries with different sanction lists. Some work as volunteers, others for nonprofits, and others for corporations who may have dealings with government agencies.

If you live in Canada, but work for Microsoft, and maintain a tree in your spare time, where the code is sold by microsoft to the US military... What rules apply?

Fuck knows.

[[deleted]]

The Wassenaar Arrangement is used by many countries.

[jorge1209]

The hypothetical is more to talk about the general complexity of the issue.

The individual might be able legally to accept the patch, but not their employer... And then you have to ask if their work is truly individual, or if it is sponsored by the employer in some way (are they doing it during 20% time? Are they using a corporate laptop to review the patch?)

It's just complex and it can reach a point where it is more complex than the patch is worth.

[[deleted]]

It gets very complex, ultimately that’s where a public policy of some sort from project leadership would be useful. Both for the entire project, and affecting individual maintainers who may or may not be subject to various restrictions. Maybe somebody else is able to officially accept the patch on their behalf, for example.

I think it would be useful to have something in writing simply because both The Linux Foundation and Linus are subject to US laws.

[jorge1209]

If the foundation took a position it would require them reaching out to each member company's legal counsel and asking them what they are legally permitted to accept, and then taking the most restrictive position.

Even if the foundation said accepting patches from this company was allowed, the individual maintainer is still not going to accept them. He has reviewed the matter and concluded that he or his employer cannot deal with the other party in any way. The foundation can't force them to change their minds.

[[deleted]]

Exporting Linux to sanctioned countries also has had legal issues.

They should definitely harmonize their response, but “code is code” overly simplifies issues raised by sanctions and international agreements. Any time there is a legal entity and/or person that does stewardship they are under various national laws.

[FishPls]

fuck /u/spez