nixpkgs/pkgs
Emily 95f82e2a45 p7zip: remove non-free RAR support
7-Zip's RAR implementation is built on the non-free UnRAR source code;
DOC/License.txt says:

      Licenses for files are:
    
        1) CPP/7zip/Compress/Rar* files:  GNU LGPL + unRAR restriction
        2) All other files:  GNU LGPL
    
      The GNU LGPL + unRAR restriction means that you must follow both 
      GNU LGPL rules and unRAR restriction rules.
    
    ...
    
      unRAR restriction
      -----------------
    
        The decompression engine for RAR archives was developed using source 
        code of unRAR program.
        All copyrights to original unRAR code are owned by Alexander Roshal.
    
        The license for original unRAR code has the following restriction:
    
        The unRAR sources cannot be used to re-create the RAR compression algorithm, 
        which is proprietary. Distribution of modified unRAR sources in separate form 
        or as a part of other software is permitted, provided that it is clearly
        stated in the documentation and source comments that the code may
        not be used to develop a RAR (WinRAR) compatible archiver.

The unrar licensing is [infamously restrictive and non-free][fedora];
it's inappropriate for us to keep the RAR support while labelling the
package as free software (and indeed there's a commented-out line
pointing out that the current `meta.license` is false). Unfortunately,
the 7-Zip upstream seems uninterested in replacing the code with a
freely-licensed alternative (see [7-Zip ticket #1229][7zip]).

[fedora]: https://fedoraproject.org/wiki/Licensing:Unrar
[7zip]: https://sourceforge.net/p/sevenzip/feature-requests/1229/

An alternative solution would be to mark the p7zip package as non-free
instead; I decided not to because its other functionality (especially
`.7z` support) is freely-licensed and useful, and there are free
software alternatives for extracting RAR files (e.g. in nixpkgs there's
`archiver`, which is written in a memory-safe language, and `unar`,
which at least doesn't have two patches for CVEs that haven't been
addressed upstream...).

I checked that `7z(1)` fails gracefully on `.rar` files now:
    
    emily@renko ~/tmp> curl -L -O https://www.philippwinterberg.com/download/example.rar
      % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                     Dload  Upload   Total   Spent    Left  Speed
    100 5715k  100 5715k    0     0  6716k      0 --:--:-- --:--:-- --:--:-- 6716k
    emily@renko ~/tmp> 7z x example.rar
    
    7-Zip [64] 16.02 : Copyright (c) 1999-2016 Igor Pavlov : 2016-05-21
    p7zip Version 16.02 (locale=en_CA.UTF-8,Utf16=on,HugeFiles=on,64 bits,8 CPUs x64)
    
    Scanning the drive for archives:
    1 file, 5853119 bytes (5716 KiB)
    
    Extracting archive: example.rar
    ERROR: example.rar
    Can not open the file as archive
    
        
    Can't open as archive: 1
    Files: 0
    Size:       0
    Compressed: 0
2020-04-22 15:01:48 +00:00
..
applications mblaze: install msuck and mblow 2020-04-22 12:52:47 +00:00
build-support Merge pull request #85680 from NixOS/fix-srconly 2020-04-21 22:45:34 +00:00
common-updater common-updater: change default development version check to false 2020-04-16 08:06:56 -03:00
data yaru-theme: mark as broken 2020-04-21 07:37:22 +02:00
desktops Merge pull request #85318 from romildo/upd.xfce 2020-04-19 20:57:54 -03:00
development Merge pull request #83054 from peterhoeg/u/icr 2020-04-22 20:31:35 +08:00
games openrct2: 0.2.4 -> 0.2.6 2020-04-21 19:14:59 +02:00
misc Merge pull request #85679 from Omoroca13/pcsx2 2020-04-22 16:10:01 +02:00
os-specific linux/hardened-patches/4.19.116: 4.19.116.NixOS-a -> 4.19.116.a 2020-04-20 10:05:36 -04:00
servers Merge pull request #79840 from knl/update-oauth2_proxy-to-5.0.0 2020-04-22 12:15:07 +02:00
shells Merge pull request #85677 from dywedir/oil 2020-04-22 09:23:39 +02:00
stdenv treewide: Per RFC45, remove all unquoted URLs 2020-04-10 17:54:53 +01:00
test
tools p7zip: remove non-free RAR support 2020-04-22 15:01:48 +00:00
top-level Merge pull request #83054 from peterhoeg/u/icr 2020-04-22 20:31:35 +08:00