Re: Voting on the Scapy licensing resolutions

Ray Kinsella


This is an excellent question and is something we missed - good catch and thanks.
Essentially do we have the right to relicense the affected code?

You are correct that has been problematic for other projects.
OpenSSL and VLC are notably examples of this at the extreme end.

Based on Charter Section 7 (

1. Participants acknowledge that the copyright in all new contributions will be retained by the copyright holder as independent works of authorship and that no contributor or copyright holder will be required to assign copyrights to the Project.
2. Except as described in Section 7.c., all code contributions to the Project are subject to the following:
i. All new inbound code contributions to the Project must be made using the Apache License, Version 2.0 (available here: (the “Project License”).

So anyone contributing code to still retains the copyright.
And contributed code on the basis of the Apache 2 License.

We will need a followup discussion on this at today's TSC.
(can you join?)


Ray K

From: Luca Muscariello <@muscariello>
Sent: Thursday 5 March 2020 13:01
To: Kinsella, Ray <ray.kinsella@...>
Cc: tsc@...; Maciek Konstantynowicz (mkonstan) <mkonstan@...>; Vratko Polak -X (vrpolak - PANTHEON TECH SRO at Cisco) <vrpolak@...>; Trishan de Lanerolle <tdelanerolle@...>
Subject: Re: [tsc] Voting on the Scapy licensing resolutions

Hi Ray,

Can I ask a clarification question?
Only the copyright holder can modify a distribution license whereas it looks like the TSC is going to act 
as a copyright holder's proxy. Is this correct?


On Thu, Mar 5, 2020 at 1:51 PM Ray Kinsella <mailto:ray.kinsella@...> wrote:
Hi folks,
So we need to take a vote on the proposed Scapy licensing resolutions at today TSC.
That is we …
1. We approve of the mitigations listed in last Thursday’s presentation.
A. Explicit licensing of affected code as GPLv2 (CSIT, VPP & TRex)
B. Moving affected code to a GPL labelled directory (CSIT).
C. Preservation of project apache licensing through process separation (CSIT, VPP & TRex).
2. We approve these exceptions to the Project Apache2 Licensing for CSIT, VPP & TRex.
Proposed vote text:
Based on the mitigation described. The TSC approves exceptions to the Project Apache2 licensing permitting the use of Scapy by CSIT, VPP & TRex.
Any comments on the above are welcome.
Ray Kinsella Project TSC Member

Join to automatically receive all group messages.