[LEGAL-359] Is it possible to include a file in source code licensed under CDDL / GPLv2 ?

• Type: Question
• Status: Resolved
• Priority: Major
• Resolution: Won't Fix
• Assignee: Unassigned
• Reporter: Szilard Nemeth
• Created: 12/Jan/18 09:59
• Updated: 24/May/18 06:27
• Resolved: 24/May/18 06:27

Description

I would like to ask for an advice for the following situation:
Due to technical reasons (lack of extensibility option) I had to copy a class from Jersey which is the implementation of choice for JAX-RS, see webpage: https://jersey.github.io/documentation/1.19.1/index.html
The class is slightly modified by me so it is not an exact copy of the original.

The class in question:
https://github.com/jersey/jersey-1.x/blob/b73951e9186fb540675eac62aed622946be781ff/jersey-core/src/main/java/com/sun/jersey/spi/service/ServiceFinder.java

According to their documentation and the header of the above file, Jersey is dual licensed under CDDL 1.1 and GPL v2, see: https://jersey.github.io/license.html

Checking the Apache license page (https://www.apache.org/legal/resolved.html#category-b), it says the following about CDDL 1: "Software under the following licenses may be included in binary form within an Apache product if the inclusion is appropriately labeled (see below):"

Question 1:
Given that, is it possible to include one class from Jersey to our codebase?

Question 2:
Since we have automatic license checking turned on for all files, somehow I would need to include the ASF license text on the top of the file. May I legally do that?

Question 3:
The original license text on ServiceFinder says: "DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER."
Is it possible to include the ASF license on top of the file and keep the original license as well, or if it's not a good practice, how may I handle this situation?

Thanks in advance!

Issue Links

• Blocked: YARN-7451 Add missing tests to verify the presence of custom resources of RM apps and scheduler webservice endpoints