# Third-party MIB notices

This project redistributes standards MIB modules under several sets of terms.
The audit record for every retained and removed module is in
`server-mibs/licenses.json`. This document records the governing terms and the
project's compliance policy; it is not legal advice.

## Compliance policy

- Files under `server-mibs/` are third-party works and must not be edited in
  place.
- Copyright, attribution, revision history, and license legends embedded in a
  MIB must be retained.
- Older RFC-derived modules marked `IETF-RFC-MIB-As-Is` may only be
  redistributed as the unmodified extracted MIB. Do not patch, reformat, or
  generate derivative versions of these files.
- Modern IETF code components marked `IETF-TLP-BSD-3-Clause` may be modified
  and redistributed under the BSD terms below.
- IANA protocol-registry modules marked `IANA-Protocol-Registry-CC0-1.0` are
  covered by IANA and IETF's protocol-registry licensing statement and its
  incorporated CC0 disclaimer.
- Fourteen older RFC MIBs modified by Debian's `rfcmibs.diff` were removed.
  Their names and reasons are recorded in `server-mibs/licenses.json`.
- `database/mib-atlas.sql` stores only structural facts for older
  `IETF-RFC-MIB-As-Is` modules: module/symbol names, declaration types, numeric
  OIDs, and tree relationships. Syntax clauses, properties, descriptions, and
  raw declarations for those modules are deliberately omitted.
- Rich parsed database fields are emitted only for modules classified under the
  BSD or CC0 policies below.
- Original downloads are served only when the corresponding database manifest
  `downloadable` flag permits them. Original availability does not grant broader
  rights to transformed derivatives.

## IETF Trust BSD code components

The IETF Trust identifies Management Information Base modules as Code
Components. For applicable IETF documents, Code Components are licensed under
the following three-clause BSD terms. Copyright attribution and years are
contained in the individual MIB modules.

> Redistribution and use in source and binary forms, with or without
> modification, are permitted provided that the following conditions are met:
>
> - Redistributions of source code must retain the above copyright notice,
>   this list of conditions and the following disclaimer.
> - Redistributions in binary form must reproduce the above copyright notice,
>   this list of conditions and the following disclaimer in the documentation
>   and/or other materials provided with the distribution.
> - Neither the name of Internet Society, IETF or IETF Trust, nor the names of
>   specific contributors, may be used to endorse or promote products derived
>   from this software without specific prior written permission.
>
> THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
> AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
> IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
> ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
> LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
> CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
> SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
> INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
> CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
> ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
> POSSIBILITY OF SUCH DAMAGE.

Authoritative references:

- <https://trustee.ietf.org/documents/trust-legal-provisions/tlp-5/>
- <https://trustee.ietf.org/documents/trust-legal-provisions/code-components-list-3/>
- <https://trustee.ietf.org/documents/trust-legal-provisions/copyright-policy-and-tlp-faq/>

## Older RFC-derived MIB modules

The retained older modules are distributed as unmodified MIB extracts. The
applicable IETF/Internet Society terms permit the designated MIB section to be
extracted as-is for separate use. They do not provide the same modification
rights as the BSD terms above.

The individual modules retain any abbreviated copyright notices required by
their source RFC. The Debian source copyright file records the following
general older Internet Society terms:

> Copyright © 1997-2006 The Internet Society and the persons identified as
> the document authors.
>
> This document and translations of it may be copied and furnished to others,
> and derivative works that comment on or otherwise explain it or assist in
> its implementation may be prepared, copied, published and distributed, in
> whole or in part, without restriction of any kind, provided that the above
> copyright notice and this paragraph are included on all such copies and
> derivative works. However, this document itself may not be modified in any
> way, such as by removing the copyright notice or references to the Internet
> Society or other Internet organizations, except as needed for the purpose of
> developing Internet standards in which case the procedures for copyrights
> defined in the Internet Standards process must be followed, or as required
> to translate it into languages other than English.
>
> The limited permissions granted above are perpetual and will not be revoked
> by the Internet Society or its successors or assignees.
>
> This document and the information contained herein is provided on an "AS IS"
> basis and THE INTERNET SOCIETY AND THE INTERNET ENGINEERING TASK FORCE
> DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO
> ANY WARRANTY THAT THE USE OF THE INFORMATION HEREIN WILL NOT INFRINGE ANY
> RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A
> PARTICULAR PURPOSE.

For designated MIB sections, the applicable exception permits extraction as-is
for separate use. This project relies on that exception and does not grant
broader modification rights.

Authoritative and packaging references:

- <https://datatracker.ietf.org/doc/rfc3978/>
- `/usr/share/doc/snmp-mibs-downloader/copyright` in the audited source system
- The source RFC number for each module in `server-mibs/licenses.json`

## IANA protocol-registry modules

The joint IANA/IETF protocol-registry statement dedicates applicable copyright
owned by IANA and IETF to the public domain and licenses sublicensable rights
as broadly as permitted under CC0 1.0. The statement includes important
disclaimers about possible third-party rights and excludes patents, trademarks,
privacy, and similar rights.

Authoritative references:

- <https://www.iana.org/help/licensing-terms>
- <https://creativecommons.org/publicdomain/zero/1.0/legalcode>

## Audit provenance

The original collection came from Debian's `snmp-mibs-downloader` package
version 1.6 in the `non-free` section. Debian classifies it as non-free largely
because older RFC-derived MIBs do not allow modification, even though exact
redistribution is permitted. The audit used:

- `/etc/snmp-mibs-downloader/rfclist`
- `/etc/snmp-mibs-downloader/ianarfclist`
- `/etc/snmp-mibs-downloader/ianalist`
- `/etc/snmp-mibs-downloader/rfcmibs.diff`
- `/usr/share/doc/snmp-mibs-downloader/copyright`

See `server-mibs/licenses.json` for the machine-readable result.