unfortunate restrictions on the freedom to run\footnote{See

  \S~\ref{freedom-to-run} of this tutorial for the details on ``the freedom to

  run''.}

GPLv3~\S2\P2 distinguishes between activities of a licensee that are

permitted without limitation and activities that trigger additional

requirements.  Specifically, GPLv3~\S2\P2 guarantees the basic freedoms of

privately modifying and running the program.

Also, GPLv3~\S2\P2 gives an explicit permission for a client to provide a

copy of its modified software to a contractor exclusively for that contractor

to modify it further, or run it, on behalf of the client.  However, the

client can \textit{only} exercise this control over its own copyrighted

changes to the GPL-covered program.  The parts of the program it obtained

from other contributors must be provided to the contractor with the usual GPL

freedoms.  Thus, GPLv3 permits users to convey covered works to contractors

operating exclusively on the users' behalf, under the users' direction and

control, and to require the contractors to keep the users' copyrighted

changes confidential, but \textit{only if} the contractor is limited to acting

on the users' behalf (just as the users' employees would have to act).

The strict conditions in this ``contractors provision'' are needed so that it

cannot be twisted to fit other activities, such as making a program available

to downstream users or customers.  By making the limits on this provision

full freedoms of the GPL that they deserve.

The FSF was specifically asked to add this ``contractors provisions'' by

large enterprise users of Free Software, who often contract with non-employee

developers, working offsite, to make modifications intended for the user's

private or internal use, and often arrange with other companies to operate

their data centers.  Whether GPLv2 permits these activities is not clear and

may depend on variations in copyright law in different jurisdictions.  The

practices seem basically harmless, so FSF decided to make it clear they are

permitted.

GPLv3~\S2's final paragraph includes an explicit prohibition of sublicensing.

This provision ensures that GPL enforcement is always by the copyright

holder.  Usually, sublicensing is regarded as a practical convenience or

necessity for the licensee, to avoid having to negotiate a license with each

licensor in a chain of distribution.  The GPL solves this problem in another

way --- through its automatic licensing provision found in GPLv3\~S10 (which

is discussed in more detail in \S\~ref{GPLv3s10} of this tutorial).

\section{GPLv3's views on DRM and Device Lock-Down}

\label{GPLv3-drm}

The issues of DRM, device lock-down and encryption key disclosure were the

most hotly debated during the GPLv3 process.  FSF's views on this were sadly

and GPLv3\S6 provisions that, taken together, are a minimalist set of terms

sufficient to protect the software freedom against the threat of invasive

para-copyright.

The compromises made were ultimately quite reasonable.  The primary one is

embodied in GPLv3\S6's ``User Product'' definition (see \S~\ref{user-product}

in this tutorial for details).  Additionally, some readers of early GPLv3

drafts seem to have assumed GPLv3 contained a blanket prohibition on DRM; but

it does not.  In fact, no part of GPLv3 forbids DRM regarding non-GPL'd

works; rather, GPLv3 forbids the use of DRM specifically to lock-down

restrictions on users' ability to install modified versions of the GPL'd

software itself, but again, \textit{only} with regard to User Products.

\section{GPLv3~\S3: What Hath DMCA Wrought}

\label{GPLv3s3}

As discussed in \S~\ref{software-and-non-copyright} of this tutorial,

\href{http://www.law.cornell.edu/uscode/text/17/1201}{17 USC~\S1201} and

relate sections\footnote{These sections of the USC are often referred to as

  the ``Digital Millennium Copyright Act'', or ``DMCA'', as that was the name

  of the bill that so-modified these sections of the USC\@.} prohibits users

from circumventing technological measures that implement DRM\@.  Since this

is part of copyright law and the GPL is primarily a copyright license, and

since what the DMCA calls ``circumvention'' is simply ``modifying the

provisions are not applicable to the GPLv3'd software.  GPLv3\S3 shields

users from being subjected to liability under anti-circumvention law for

exercising their rights under the GPL, so far as the GPL can do so.

First, GPLv3\S3\P1 declares that no GPL'd program is part of an effective

technological protection measure, regardless of what the program does.  Early

drafts of GPLv3\S3\P1 referred directly to the DMCA, but the final version

instead includes instead an international legal reference to

anticircumvention laws enacted pursuant to the 1996 WIPO treaty and any

similar laws.  Lawyers outside the USA worried that a USA statutory reference

could be read as indicating a choice for application of USA law to the

license as a whole.  While the FSF did not necessarily agree with that view,

the FSF decided anyway to refer to the WIPO treaty rather than DMCA, since

several national anticircumvention laws were (or will likely be) structured

more similarly to the anticircumvention provisions of the DMCA in their

implementation of WIPO\@.  Furthermore, the addition of ``or similar laws''

provides an appropriate catch-all.

Furthermore, GPLv3\S3\P2 states precisely that a conveying party waives the

power to forbid circumvention of technological measures only to the extent

that such circumvention is accomplished through the exercise of GPL rights in

the conveyed work.  GPLv3\S3\P2 makes clear that the referenced ``legal

rights'' are specifically rights arising under anticircumvention law.  and

refers to both the conveying party's rights and to third party rights, as in