JAN 26, 2006 1:00am ET

Related Links

The State of Cloud Standards
February 10, 2012
CIO Stepping Stones to Success
February 10, 2012
Oracle to Buy Taleo
February 9, 2012

Web Seminars

6 Key Things to Fast Track your Mobility Strategy
February 23, 2012
Why Getting Started in MDM Doesn't Have to Be Difficult
February 29, 2012
Dashboards: How's Business? Ask your Data!
March 15, 2012

Sarbanes-Oxley Risks Associated with Linux

Print
Reprints
Email

Many companies using Linux for embedded applications may be unwittingly violating the Linux license and even breaking federal securities laws, according to a white paper released by Wasabi Systems, an embedded operating systems provider. The white paper, When GPL Violations are Sarbanes-Oxley violations, is the first in a series of legal studies analyzing the common misperceptions and risks associated with Linux and its license, the GNU general public license (GPL). Future white papers will look at the GPL implications of loadable kernel modules (LKM) and how upstream GPL violations impact VARs and end users.

"Linux is a powerful operating system," says Jay Michaelson, an author of the white paper and Wasabi Systems' General Counsel. "But if companies violate the license, the consequences can be more severe than they think." He notes that Wasabi uses open source software in its products, including very careful use of software governed by the GPL.

According to Michaelson, the problem lies with the requirement of the Sarbanes-Oxley Act, passed in 2002, that companies disclose ownership of intellectual property to their shareholders. Michaelson says that dozens of companies are discovered each year to have violated the terms of the GPL, and if they are public companies, they are violating Sarbanes-Oxley. "If companies are violating the GPL, they don't have the right to use that software," asserts Michaelson. "And if they don't have the right to use the software, they're violating federal law if they claim that they do."

The extent of this problem remains unclear. The Free Software Foundation, which is the primary enforcer of the GPL, reports that it pursues "several dozen" enforcement actions each year. In the past, such violators were merely required to release their code to the public. Now, Michaelson says, "Sarbanes changes the picture completely. For public companies, violating the Linux license is now a matter of federal securities law."

This piece is brought to you by the Information Management editorial staff.

Filed under:
GRC

Advertisement

Comments (0)

Be the first to comment on this post using the section below.

Add Your Comments:
You must be registered to post a comment.
Not Registered?
You must be registered to post a comment. Click here to register.
Already registered? Log in here
Please note you must now log in with your email address and password.
Twitter
Facebook
LinkedIn
Login  |  My Account  |  White Papers  |  Web Seminars  |  Events |  Newsletters |  eBooks
FOLLOW US
Please note you must now log in with your email address and password.