Permission to Use RawTherapee in Government

Hi Dave,
I’m a contractor to the USGS at EROS (Earth Resources Observation and Science), where we archive and process satellite images (primarily from the Landsat missions). I’m a scientific software developer working with the algorithms for processing the satellite imagery into various levels of characterization, calibration, and correction. We’ve been using GPL’ed software in our systems and applications for decades. In fact, we work primarily on Linux systems (CentOS), and the sysadmins will install any packages that we require. We live and breathe Open Source. :wink: So I’d be surprised if RawTherapee, Darktable, GIMP, QGIS, or any Open Source application would be an issue /from a licensing standpoint/. I would think the only issues may be with some managers who don’t understand or “trust” Open Source, confusing it with some of the crappy freeware/shareware out there.
Having said that, I feel your pain. We had management meetings back around 2000 where we spent months convincing the government contracting officers that Open Source is legal and safe to use in our environment.

6 Likes

Here’s my background: I spent 10 years working for a government contractor (Lockheed Martin).

Understandably, there were serious concerns about integrating GPL software as part of any deliverable. However, in the case of RawTherapee, in nearly any use case (and definitely yours) it falls into the category of a tool, not a component of a deliverable product.

As a tool - we even had approval to use GPL software (although there needed to be a fairly long approval process that included a security review) in our labs which were processing classified data.

But like Lowell, I feel your pain. I had one situation where we wanted to include OpenSSL as part of a deliverable. The license of OpenSSL happens to be such that it was legal to do this. However, our internal legal compliance team were F**ing lazy and relied on an automated tool that basically grepped the source code for various keywords. The end result of this tool concluded that OpenSSL was under both the actual OpenSSL license and the GPL - because of files in the source code distribution that explicitly called out the GPL as being incompatible and them matching that keyword! It took MONTHS of the engineering team “vehemently disagreeing” with legal before we could get a human in the legal department to actually sit and read the fscking license.

As someone who has a minor contribution (so far, planning on more in the future) to RT and is hence a small-time copyright holder, my interpretation is exactly in line with @heckflosse - Read the license terms, if there is nothing in those terms that is problematic for your use case - go ahead! (In general, for any government user merely using the software as a tool with no modification and no redistribution as a component of a deliverable, there are no problems I would expect).

In fact, the nature of the license is such that even if an RT contributor objected to government use - as the software is licensed under the GPL and thus their contribution is a “derivative work” which falls under the GPL - they could not object to government use as a contributor doing so would violate section 10 of the GPL:

You may not impose any further restrictions on the exercise of the rights granted or affirmed under this License. For example, you may not impose a license fee, royalty, or other charge for exercise of rights granted under this License, and you may not initiate litigation (including a cross-claim or counterclaim in a lawsuit) alleging that any patent claim is infringed by making, using, selling, offering for sale, or importing the Program or any portion of it.

As a side note to the original poster - the NPS rocks. If any of you use trackpad/touchpad scrolling, I’ll be incredibly proud to have made some of your lives a little easier. :slight_smile: You’re one of my favorite government agencies!

As a side note, @rangerdavid - are you based in any particular park? One of my college classmates worked for the NPS for years. They are now working for (if I recall correctly) an environmental nonprofit organization. They time as a ranger in Shenandoah and Yosemite, and are now back in the Shenandoah Valley working for the Valley Conservation Council.

2 Likes

Here’s an approach to consider: If your PCOs have already authorized use of a particular Linux distro, you might be able to compel them to allow install of the RT package that “comes with” that distro. If you’re using Windows, sorry 'bout that… :smile:

1 Like

Ugh… You’ve gotten into the rather sore spot of distribution packaging (or lack thereof).

An ongoing issue for RT which @Morgan_Hardwood and others are working on improving.

And I suspect that while the NPS might use Linux on server backends, they (like many other United States government entities) are still stuck with Microsoft on the desktop.

(I mentioned labs processing classified data? Our security people had authority to self-certify Windows installations. But any Linux installation needed to go through months of reviews and paperwork by DSS.)

It was actually easier to get Wireshark installed on a Windows machine (as it was pre-approved software) than it was to get a new Linux machine approved.

1 Like

I thought it was worth a shot. My background is 20yrs Air Force acquisition, 18yrs on a weapon system program as a gov’t contractor. It’s recent observation, but I’ve seen Linux distros used in DoD systems in other than server applications. With the “demise” of Solaris, Linux is making inroads in workstation applications.

In defense of the PCOs, they’re just oriented to working under a contractual relationship: goods/services for consideration. A permission letter would give them what they need to abrogate that relationship. For a FOSS license to have the same weight in their eyes, it would have to explicitly address their subject use.

1 Like

To Whomever it May Concern

I, the Agent and Settler for Morgan H. Wood, the Individual not the Person, within the bounds of the RawTherapee licence agreement, the GNU General Public License Version 3, hereby explicitly grant permission for RawTherapee to be used, at your own risk, by the United States Government and its colonies, by Donald John Trump, Barack Hussein Obama II and III, the FBI, the CIA, the NSA, NASA, NCIS, Dr. Phil, the League of Nations, the National Parks Service including John Nores and Ranger David, the Department of Motor Vehicles, Joe Rogan, Nick Offerman, Elon Musk, and Klaus. This recognition does not extend to the Church of Scientology and affiliates.

But only on Tuesdays.

6 Likes

This is great! Thanks for making my day! :grin::grin::grin::grin:

Technically, as much as I’m sure we’d all like to stop the CoS from using RT - that would be a violation of section 10.

So is the Only on Tuesdays clause

(I know you were joking, because the whole request is silly, but these compliance officers can be excessively paranoid.)

Getting more seriously - I think everyone who is a contributor can agree that the license text at RawTherapee/LICENSE.txt at dev · Beep6581/RawTherapee · GitHub stands as our letter.

@rangerdavid - if that is insufficient for your compliance officer, I must ask why:
Does your compliance officer feel that some aspect of how you use the software would conflict with the terms laid out in the license?

Are they asking for a letter because they feel that an exemption is needed? What exemption are they looking for?

No single RT contributor has the authority to grant such an exemption to anyone, the GPLv3’s policy on derivative works ensures that. To grant an exemption, every single copyright holder (basically every contributor to RT) would have to approve alternative licensing. For this reason I have serious objections to supplying any sort of letter beyond the license text, as this letter could be misconstrued as an implied grant of some sort of exemption.

If they merely want a letter that says “comply with the terms of the license” - I object because it is silly and redundant and would set the precedent that the RT team gives silly and redundant letters, which would result in the team getting deluged with requests for redundant letters, which would mean we would spend all of our time writing letters and not developing the software.

I’m willing to give informal opinion on whether I think a particular use case would actually require some form of exemption. So far what @rangerdavid has described does not seem like it would require an exemption of any form. Is the compliance officer worried that program output would be consider a derivative work? See Frequently Asked Questions about the GNU Licenses - GNU Project - Free Software Foundation

2 Likes

Hi @rangerdavid!

I have had similar problems internally with the DoD, but I suspect the path to a solution might look different. (The Navy has been working with open source non-profits for almost two decades now.)

We have also had these types of requests in the GIMP team and haven’t really documented a strategy for dealing with it.

I think we might be able to help you get what you need better if we had an example of what the compliance officer might be looking for? Maybe see if they have an example or previous letter that they were happy with?

@Morgan_Hardwood - I’m also happy to try and draft something that might make a compliance officer happy.

2 Likes

At Lockheed, we eventually had an official FOSS approval process. The approval process was per-program, and the application for approval included a questionnaire including things such as:
What is the software?
What is its license? (but this would basically get ignored in favor of an automatic grep search, see my previous rant regarding false-positiving a GPL-incompatible piece of software as GPL)
Will this be made part of a customer deliverable or is it just being used as a tool?
Will anyone be modifying the software?

In general, approval for unmodified tools was pretty easy. Things got fun when we wanted to deploy something as part of a product.

1 Like

@Morgan_Hardwood

You just made me snort my coffee. THANK YOU.

@patdavid, Thank you! I don’t think they are looking for anything too fancy. Simply “I’m the developer and I approve of your use of this software within the National Park Service” is about all they need. Sadly, most open source is the work of many, many people… so without a “foundation” or other construct, it’s hard to get a definitive letter from just one person. Hence the GPL license.

I think our IT leadership just needs to read the GPL front to back, and move on to more important things, like setting up a packet sniffer and seeing what servers the software might be trying to dial out to, etc… you know, look for security issues, not whether a team of collaborating developers are going to lawyer up when their obviously free software is… free. See also: GPL3 license, as stated…

4 Likes

@Entropy512, I’m here: Lava Beds National Monument and Tule Lake National Monument, in very northeastern California. Shenandoah is amazing, I miss that part of the country (I’m a wandering east-coaster).

I’m trying to save tax payers a lot of money by using RawTherapee vs. Lightroom, ShotCut vs. Premier, Krita vs. Photoshop, and Inkscape vs. Illustrator. Inkscape and GIMP are already approved in the NPS, but not the others. Just trying to get the NPS modernized a bit more.

5 Likes

The deeply obscured point in my reply was that if the process requires some random self-professed Tom, Dick or Harry from Europe to send an email or write a post on some forum which carries any weight with the federal government of the United States over the one thing that actually bares all the weight - the licence - then the process is completely broken. The licence is there for a reason. The licence was written by actual law-savvy people from an actual organization, and anyone who contributes to RawTherapee or uses RawTherapee must abide by it. What any of us write in an email is irrelevant.

Good luck with your quest to get the government to use more open-source software!

6 Likes

You are 100% correct in this. Thank you.

As one of the FOSS developers have already responded to this silly request, it sounds like IT staff just want “personal amplification” of the GPL for no stated or logical reason. Yup. It’s all in the GPL…

A worthy cause indeed. Best of luck!

Hey @rangerdavid, how did it go?

Howdy! Still waiting to hear back, but my assumption is that RawTherapee will be approved, I provided ample documentation and other related things (InkScape, GIMP) have been approved for many years.

I’ll let everyone know when the National Park Service officially approves it…

8 Likes

That would be great :+1:

2 Likes