mirror of
https://github.com/NationalSecurityAgency/ghidra.git
synced 2024-11-24 05:02:41 +00:00
Fleshing out README and adding legal framework.
This commit is contained in:
parent
07d98fcea7
commit
d2400ae34b
@ -15,9 +15,41 @@ there are many ways you can contribute. For example, you can:
|
||||
- Package and distribute the software in a downstream community (such as your
|
||||
preferred Linux distribution)
|
||||
|
||||
Note: Contributing to the open source project is entirely voluntary, and does
|
||||
not create an employer-employee relationship between the U.S. Government and
|
||||
the contributor.
|
||||
## Legal
|
||||
|
||||
The project maintainer for this Project will only accept contributions using the [Developer's Certificate of Origin 1.1][dco] located at https://developercertificate.org ("DCO").
|
||||
The DCO is a legally binding statement asserting that the contributor is the creator of the contribution, or otherwise has the authority to distribute the contribution, and that they are intentionally making the contribution available under the license(s) associated with the Project ("License").
|
||||
|
||||
This is an open source project.
|
||||
Contributions you make to this public U.S. Government ("USG") repository are completely voluntary.
|
||||
When you submit a pull request, you are offering your contribution without expectation of payment, you expressly waive any future pay claims against the USG related to your contribution, and you acknowledge that this does not create an obligation on the part of the USG of any kind.
|
||||
Furthermore, your contributing to this project does not create an employer-employee relationship between the United States ("U.S.") Government and the contributor.
|
||||
|
||||
### Developer Certificate of Origin (DCO) Process
|
||||
|
||||
This project implements a Lite version of the DCO process.
|
||||
When you submit a pull request to this repository for the first time, you need to sign the DCO.
|
||||
To indicate you have read and agree to the DCO, you need to add the following information to the [contributors] file:
|
||||
|
||||
- Name
|
||||
- Email address or other contact (required)
|
||||
- Copyright year(s) (required)
|
||||
|
||||
This essentially affirms that you have the right to submit the work you are contributing in your pull requests and that you consent to us treating the contribution in a way consistent with the License.
|
||||
Please see the [licensing intent][intent] for details.
|
||||
The primary License for this Project is the Apache License, Version 2.0 ("Apache 2.0").
|
||||
The project composes a number of software modules with documentation ("Modules").
|
||||
Each module may have additional licensing restrictions imposed by its dependencies, or because some portion of it was derived from software requiring the application of these restrictions.
|
||||
In most cases, these licenses do not introduce any restrictions beyond those already required by Apache 2.0, e.g., BSD-style licenses.
|
||||
In general, we intend to indicate within each Module the applicable license(s), whether or not they are more restrictive than the Project's License.
|
||||
When you sign the DCO and submit a pull request containing contributions to such a module, please keep in mind you are asserting you have the authority to submit the work, and that the work will be made available under those license(s).
|
||||
|
||||
### Important Points
|
||||
|
||||
You are not required to provide your name, but you must provide a valid and functional means to contact you.
|
||||
If you are a U.S. Federal Government employee and use a .mil or .gov email address to agree to the DCO, or you otherwise indicate that you are a U.S. Federal Government employee, we interpret your signed DCO to mean that the contribution was created in whole or in part by you in your official capacity as a U.S. Federal Government Employee.
|
||||
This implies your contribution is not subject to copyright protections within the United States.
|
||||
If you wish to contribute in your own capacity, that is, on your own personal time, you must sign the DCO in that capacity, using an appropriate email address or other means of contact.
|
||||
|
||||
## Bugs and Feature Requests
|
||||
|
||||
@ -67,6 +99,13 @@ smooth process when submitting a patch:
|
||||
subject may be required
|
||||
- COULD means that the change is optional
|
||||
|
||||
## Getting Started
|
||||
|
||||
Once available, please see the [developer's guide][devguide] for instructions to set up a suitable development environment.
|
||||
|
||||
[issues]: https://github.com/NationalSecurityAgency/ghidra/issues
|
||||
[repository]: https://github.com/NationalSecurityAgency/ghidra/
|
||||
|
||||
[dco]: https://developercertificate.org
|
||||
[intent]: INTENT.md
|
||||
[contributors]: Contributors.md
|
||||
[devguide]: DevGuide.md
|
||||
|
13
DISCLAIMER.md
Normal file
13
DISCLAIMER.md
Normal file
@ -0,0 +1,13 @@
|
||||
# Disclaimer of Warranty
|
||||
|
||||
This Work is provided "AS IS."
|
||||
Any express or implies warranties, including but not limited to, the implied warranties of merchantability and fitness for a particular purpose are disclaimed.
|
||||
In no event shall the United States Government be liable for any direct, indirect, incidental, special, exemplary or consequential damages (including, but not limited to, procurement of substitute goods or services, loss of use, data or profits, or business interruption) however caused and on any theory of liability, whether in contract, strict liability, or tort (including negligence or otherwise) arising in any way out of the use of this Work, even if advised of the possibility of such damage.
|
||||
|
||||
The User of this Work agrees to hold harmless and indemnify the United States Government, its agents and employees from every claim or liability (whether in tort or in contract), including attorney's fees, court costs, and expenses, arising in direct consequence of Recipient's use of the item, including, but not limited to, claims or liabilities made for injury to or death of personnel of User or third parties, damage to or destruction of property of User or third parties, and infringement or other violations of intellectual property or technical data rights.
|
||||
|
||||
# Disclaimer of Endorsement
|
||||
|
||||
Nothing in this Work is intended to constitute an endorsement, explicit or implied, by the United States Government of any particular manufacturer's product or service.
|
||||
|
||||
Refernce herein to any specific commerical product, process, or service by trade name, trademark, manufacturer, or otherwise, in this Work does not constitute an endorsement, recommendation, or favoring by the United States Government and shall not be used for advertising or product endorsement purposes.
|
18
INTENT.md
Normal file
18
INTENT.md
Normal file
@ -0,0 +1,18 @@
|
||||
# Licensing Intent
|
||||
|
||||
The intent is that this software and documentation ("Project") should be treated as if it is licensed under the license associated with the Project ("License") in the LICENSE file.
|
||||
However, because we are part of the United States (U.S.) Federal Government, it is not that simple.
|
||||
|
||||
The portions of this Project written by U.S. Federal Government employees within the scope of their federal employment are ineligible for copyright protection in the U.S.;
|
||||
this is generally understood to mean that these potions of the Project are placed in the public domain.
|
||||
|
||||
In countries where copyright protection is available (which odes not include the U.S.), contributions made by U.S. Federal Government employees are released under the License.
|
||||
Merged contributions from private contributors are released under the License.
|
||||
|
||||
Most portions of the Project are licensed under the Apache License, Version 2.0 ("Apache 2.0") unless indicated otherwise.
|
||||
Some modules incorporate code available under other licenses.
|
||||
These modules contain human- and machine-readable lists of the governing license(s).
|
||||
Contributions to such modules must be made available, by the contributor, under the applicable license(s).
|
||||
Please read our [contributor guide][contrib] for further details.
|
||||
|
||||
[contrib]: CONTRIBUTING.md
|
@ -9,7 +9,8 @@ Be assured efforts are under way to make the software available here.
|
||||
In the meantime, enjoy using Ghidra on your SRE efforts, developing your
|
||||
own scripts and plugins, and perusing the over a million lines of Java and
|
||||
Sleigh code released within the initial public release.
|
||||
Please consider taking a look at our[contributor guide][contrib] to see how
|
||||
The release can be downloaded from our [project homepage][project] at www.ghidra-sre.org.
|
||||
Please consider taking a look at our [contributor guide][contrib] to see how
|
||||
you can participate in this open source project when it becomes available.
|
||||
|
||||
If you are interested in projects like this and would like to develop this, and
|
||||
@ -19,4 +20,4 @@ consider applying for a [career with us][career].
|
||||
[nsa]: https://www.nsa.gov
|
||||
[contrib]: CONTRIBUTING.md
|
||||
[career]: https://www.intelligencecareers.gov/nsa
|
||||
|
||||
[project]: https://www.ghidra-sre.org/
|
||||
|
Loading…
Reference in New Issue
Block a user