Browse code

Change crypto export notice to meet Debian requirements

Solomon Hykes authored on 2013/11/12 07:08:37
Showing 2 changed files
... ...
@@ -8,35 +8,12 @@ by Keith Rarick, licensed under the MIT License.
8 8
 
9 9
 The following is courtesy of our legal counsel:
10 10
 
11
-Transfers of Docker shall be in accordance with applicable export
12
-controls of any country and all other applicable legal requirements.
13
-Docker shall not be distributed or downloaded to or in Cuba, Iran,
14
-North Korea, Sudan or Syria and shall not be distributed or downloaded
15
-to any person on the Denied Persons List administered by the U.S.
16
-Department of Commerce.
17 11
 
18
-What does that mean? 
19
-Here is a further explanation from our legal counsel:
12
+Use and transfer of Docker may be subject to certain restrictions by the
13
+United States and other governments.  
14
+It is your responsibility to ensure that your use and/or transfer does not
15
+violate applicable laws. 
20 16
 
21
-Like all software products that utilize cryptography, the export and
22
-use of Docker is subject to the U.S. Commerce Department's Export
23
-Administration Regulations (EAR) because it uses or contains
24
-cryptography (see
25
-http://www.bis.doc.gov/index.php/policy-guidance/encryption).  Certain
26
-free and open source software projects have a lightweight set of
27
-requirements, which can generally be met by providing email notice to
28
-the appropriate U.S. government agencies that their source code is
29
-available on a publicly available repository and making the
30
-appropriate statements in the README.
17
+For more information, please see http://www.bis.doc.gov
31 18
 
32
-The restrictions of the EAR apply to certain denied locations
33
-(currently Iran, Sudan, Syria, North Korea, or Cuba) and those
34
-individuals on the Denied Persons List, which is available here:
35
-http://www.bis.doc.gov/index.php/policy-guidance/lists-of-parties-of-concern/denied-persons-list.
36
-If you are incorporating Docker into a new open source project, the
37
-EAR restrictions apply to your incorporation of Docker into your
38
-project in the same manner as other cryptography-enabled projects,
39
-such as OpenSSL, almost all Linux distributions, etc.
40
-
41
-For more information, see http://www.apache.org/dev/crypto.html and/or
42
-seek legal counsel.
19
+See also http://www.apache.org/dev/crypto.html and/or seek legal counsel.
... ...
@@ -193,10 +193,9 @@ wrong or incomplete.
193 193
 *Brought to you courtesy of our legal counsel. For more context,
194 194
 please see the Notice document.*
195 195
 
196
-Transfers of Docker shall be in accordance with applicable export controls 
197
-of any country and all other applicable legal requirements. Without limiting the 
198
-foregoing, Docker shall not be distributed or downloaded to any individual or 
199
-location if such distribution or download would violate the applicable US 
200
-government export regulations. 
196
+Use and transfer of Docker may be subject to certain restrictions by the
197
+United States and other governments.  
198
+It is your responsibility to ensure that your use and/or transfer does not
199
+violate applicable laws. 
201 200
 
202 201
 For more information, please see http://www.bis.doc.gov