Commit e476188c authored by Keith Maxwell's avatar Keith Maxwell Committed by Natanael Copa

Better use license.lst in abuild sanitycheck

Before this change an invalid licence= in an APKBUILD will pass `abuild
sanitycheck`. '/usr/share/spdx/license.lst' contains one licence per line.
`grep -x` will match partial lines whereas `grep -w` will only match whole

An simple demonstration is with 'GPL-3.0' which is not a valid SPDX licence
identifier. 'GPL-3.0-only' and 'GPL-3.0-or-later' are valid licences.

$ grep --help
BusyBox v1.30.1 (2019-04-26 06:26:16 UTC) multi-call binary.

Usage: grep [-HhnlLoqvsriwFE] [-m N] [-A/B/C N] PATTERN/-e PATTERN.../-f FILE [FILE]...

Search for PATTERN in FILEs (or stdin)

        -w      Match whole words only
        -x      Match whole lines only

$ grep -w -F GPL-3.0 /usr/share/spdx/license.lst
$ grep -x -F GPL-3.0 /usr/share/spdx/license.lst
parent c9d61596
......@@ -873,7 +873,7 @@ check_license() {
local i; for i in $license; do
list_has "$i" $exclude && continue
if ! grep -q -w -F "$i" "$license_list"; then
if ! grep -q -x -F "$i" "$license_list"; then
warning "\"$i\" is not a known license"
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment