decoration decoration
Stories

GROKLAW
When you want to know more...
decoration
For layout only
Home
Archives
Site Map
Search
About Groklaw
Awards
Legal Research
Timelines
ApplevSamsung
ApplevSamsung p.2
ArchiveExplorer
Autozone
Bilski
Cases
Cast: Lawyers
Comes v. MS
Contracts/Documents
Courts
DRM
Gordon v MS
GPL
Grokdoc
HTML How To
IPI v RH
IV v. Google
Legal Docs
Lodsys
MS Litigations
MSvB&N
News Picks
Novell v. MS
Novell-MS Deal
ODF/OOXML
OOXML Appeals
OraclevGoogle
Patents
ProjectMonterey
Psystar
Quote Database
Red Hat v SCO
Salus Book
SCEA v Hotz
SCO Appeals
SCO Bankruptcy
SCO Financials
SCO Overview
SCO v IBM
SCO v Novell
SCO:Soup2Nuts
SCOsource
Sean Daly
Software Patents
Switch to Linux
Transcripts
Unix Books

Gear

Groklaw Gear

Click here to send an email to the editor of this weblog.


You won't find me on Facebook


Donate

Donate Paypal


No Legal Advice

The information on Groklaw is not intended to constitute legal advice. While Mark is a lawyer and he has asked other lawyers and law students to contribute articles, all of these articles are offered to help educate, not to provide specific legal advice. They are not your lawyers.

Here's Groklaw's comments policy.


What's New

STORIES
No new stories

COMMENTS last 48 hrs
No new comments


Sponsors

Hosting:
hosted by ibiblio

On servers donated to ibiblio by AMD.

Webmaster
Declaration by Todd M. Shaughnessy in Support of IBM's Opposition to SCO's "Renewed" Motion to Compel, as text
Sunday, October 02 2005 @ 03:47 AM EDT

There are two more IBM filings in the discovery war between IBM and SCO, one defensive and one offensive. IBM filed a Declaration of Todd M. Shaughnessy in Support of IBM's Opposition to SCO's Renewed Motion to Compel [PDF] (IBM's Memorandum in Opposition to SCO's Renewed Motion to Compel, which the Shaughnessy Declaration supports, is here [PDF]).

IBM also filed a Declaration of Amy Sorenson in Support of IBM's Motion to Compel Production of Documents on SCO's Privilege Log [PDF]. That's the motion where IBM goes on the offensive in discovery, as I explained in this article. (IBM's Motion to Compel Production of Documents on SCO's Privilege Log is here [PDF].)

Both declarations are interesting documents, with exhibits galore. (One attachment to an exhibit to the Shaughnessy Declaration is sealed, because it contains "personal identifying information".) But the Shaughnessy materials are especially fascinating, so I did that Declaration as text first. We get to see Boies Schiller in action in a particularly revealing fashion.

Before I get to the details of that, the news from the Shaughnessy Declaration is that it turns out that there aren't 3,000 individuals who have made contributions and changes to AIX and Dynix. There are only 2,704. So the broad-stroke expansiveness of Judge Wells' original Order turns out to be limited by reality, if nothing else. IBM explains:

As IBM previously noted in response to SCO's Interrogatory 5, the list of 7,200 individuals who have or have had access to AIX or Dynix source code are the people who work or worked on developing AIX and Dynix. Not all of these individuals, however, have made contributions or changes to AIX or Dynix source code; for example, a development supervisor may have access to CMVC or RCS, but may have never personally made any changes to the code.

You will perhaps want to have SCO's Memorandum in Support of its "Renewed" Motion to Compel handy, to compare what they say with what IBM says. They'll be arguing about the issues raised in these documents at the October 7th hearing. Note that they've changed the room where the hearing will be held.

Here are the two relevant Pacer entries:

09/26/2005 - *520 - **SEALED DOCUMENT** Attachment E to Exhibit 2 re 518 Declaration of Todd M. Shaughnessy in Support of IBM's Opposition to SCO's Renewed Motion to Compel filed by Defendant International Business Machines Corporation. (ce, ) (Entered: 09/29/2005)

09/30/2005 - *521 - SECOND AMENDED NOTICE OF HEARING ON MOTION re: 365 Renewed Motion by SCO Group to Compel Discovery, 503 MOTION to Compel discovery, 508 MOTION for Discovery: Motion Hearing remains set for 10/7/2005 at 10:00 AM before Magistrate Judge Brooke C. Wells, however, it will be heard in Courtroom 220. (jwd, ) (Entered: 09/30/2005)

Shaughnessy reports to the court that IBM has turned over to SCO all the AIX and Dynix materials it was supposed to that it could find, and he explains in detail what exactly IBM turned over and what steps it took to try to find everything, and he spells out for Judge Wells just how onerous her order turned out to be:

5. Complying with the Court's Order involved more than 4,700 hours of work from more than 400 IBM employees. This does not include the time spent by IBM's counsel and consultants on this project, which was likewise considerable. IBM produced a total of more than 80 GB of source code and other electronic data to SCO, and more than 900,000 pages of paper (which were scanned and produced in electronic form on CDs).

Can you imagine the expense? Of course that isn't enough to satisfy SCO, particularly because there is no AIX code in the database prior to 1991, as it turns out, which I suppose messes up SCO's ladder sequence. We and IBM know SCO will never be satisfied anyhow, as long as delay is the object. But hopefully Judge Wells will see the effort and cost she caused IBM to sustain and will blanch at the thought of ordering more. She is being asked to order IBM to turn over more now. SCO wants IBM now to go on a gathering expedition for Linux materials, and IBM has replied that it wasn't ordered to turn over publicly available Linux materials, so it declines. No doubt one purpose of the Shaughnessy declaration is to let the judge know that discovery is supposed to stay in the reasonableness ballpark.

SCO makes much of what it describes as "Missing Files". I suspect the nonsensical demand for "missing" files, files that SCO already knows are not missing, since IBM explains each item to SCO in letters to them, attached as exhibits here, reflects SCO's awareness that they are soon required to finally tell IBM what Linux files are at issue. They've tried before, but nothing impressed the court or anyone else, so they are likely in a bit of a sweat.

What to do? What to do? I can imagine them brainstorming: How about asking for more discovery? That's good for delay. Judge Wells is good for that, I imagine them saying. And then they chortle at the possibilities: they can tell the court that IBM is "foot-dragging" (which is what they call it when IBM doesn't roll over and give in to SCO's increasing demands) and that makes it impossible to meet the schedule. Then they can once again plead with the court for more time, a new schedule, a new trial date.

I'm just imagining, of course, but is it hard to imagine, given the history of this case? Even Linus is wondering why it is taking so long, according to the latest interview in Business Week. It's the same old SCO Delay Tango, and as long as Judge Wells goes along with their dance, they will keep it up, I suppose.

Of course, SCO can't send a letter to IBM without an implied threat and some chest beating. Check out the July 14, 2005 letter from Ted Normand of Boies Schiller to David Marriott, Exhibit 3:

Our information is that IBM does possess the source code for all versions of AIX prior to 1991.

Oooh. Scarey. IBM didn't fall for it, though, cooly replying in essence in their July 19, 2005 letter, Exhibit 4, Really? So where is it? If you tell us, we'll gladly follow up. Of course, there was no X-marks-the-spot from SCO in response, which tells me that it was likely a bluff. In that same letter, Boies Schiller, after asking for the "Missing Files," asks IBM for the following:

We also request that you produce the log history showing the "contents" of the source files and programmer's notes that IBM removed from the CMVC/AIX Production so that we may verify the extent to which AIX-related files may have been removed. The Court ordered IBM to produce "ALL AIX information" on CMVC, January 18 Order at 10; our request for the log is a logical and appropriate extension of IBM's discovery obligation.

Emphasis by me. An "extension" to a discovery obligation means IBM isn't obligated at all. It's just Boies Schiller that sees a way to ask for more, by calling it a "logical extension" of what IBM actually is obligated to do. See what I mean about the Boies Schiller style? They ask for something. IBM says it doesn't have to provide it. Then SCO tells the court that IBM is "withholding." Then, if the court is sufficiently bamboozled (and discovery is very liberal, anyway, as far as what a plaintiff can ask for), and goes along with the SCO demand, then IBM turns it over. Then SCO sees an "extension" it would like, and it asks IBM to give it to them, and IBM says, the order didn't say I have to. So SCO whines to the court that IBM is "withholding" this "logical extension" that the court must have meant to order. They sometimes claim the court did order it. If they get what they asked for, they ask for some more, another inch. Well. They start asking for a mile, actually, but they *intend* to get the inch. Then when they get the inch, they ask for the next "extension". At each incremental step, they tell the court that IBM is foot-dragging, because it doesn't just hand over the materials that SCO unilaterally feels are "logical" next "extensions". What does logic have to do with it? Nothing. An order is an order to everyone but SCO. Extension means more. More than what was ordered. If the court doesn't put a stop to this, SCO will never have enough and the game will continue, because that is what it is, a game, and touchdown is delay. Even describing the game is convoluted and takes a lot of time. Watching it play out is excruciating.

Get a load of what else SCO asks for:

Removal of CMVC Change-Log History

Upon exit of any command-line shell in AIX, the system apparently retains an annotated history of commands run by the user. We have reviewed the user history archive of the copy of AIX produced in the CMVC/AIX Production and have identified (among others) the following commands that IBM appears to have run in preparing the CMVC/AIX Production:

  • rm bash_history. This command removes the history of past events. Such history is useful for repeating past commands. We request that you promptly produce all shell history resulting from your preparation of the CMVC/AIX Production so that we may identify more precisely the acts taken to prepare the CMVC database for production. This request includes the bash_history for all root users as well as all administrators.

  • rm log. This command removes the log file. The log demonstrates a proper history of commands run against the operating system. We request that you promptly produce all log files related to your preparation of the CMVC/AIX Production so that we may identify more precisely the acts taken to prepare the CMVC database for production. This request includes the file log for all root users as well as all administrators.

Now, I'm not a programmer, so whenever things like this come up, I ask my tech experts to explain things to me, to make sure I get it right. So I asked them if SCO was asking for something ridiculous, or had they "caught" IBM doing something underhanded. Here's two of the replies:

1. Dr Stupid:
There are all sorts of reasons one might want to remove the history.

"bash_history" is a history of all the commands -- not just the CMVC commands -- typed by the operator of the machine. Thus it could easily contain sensitive information about internal IBM account names, machine names, etc. IBM almost certainly will have a *policy* to delete such histories from *any* machine leaving the company.

As a slightly frivolous example, the sort of thing you might find in a bash_history file would be:

cd secret_projects
vi merger_with_sun_proposal.txt
pgp merger_with_sun_proposal.txt
mail scott@sun.com merger_with_sun_proposal.pgp

Ditto the "log" file.

So there are good procedural reasons why IBM might *routinely*, not just for this litigation, remove such files. I know we do similar things where I work.

In addition, of course, I can't see how those log files are responsive to the discovery SCO has been awarded. They don't contain any information about the history of AIX, for instance.

SCO may be trying to allege that IBM has "fiddled" the database, but the production of the logs wouldn't resolve that. If IBM had bothered to "fiddle" the CMVC database, then producing "fiddled" log files would be child's play, so SCO could just allege "IBM fiddled the log files too!"

It smells of more delay, delay, delay...

2. A second adviser's reply:

SCO's request is not relevant to the contents of CMVC, and I'm quite certain that IBM would have a policy to delete these files. I delete such files myself when preparing an account or machine for someone else.

Also, it deals with the precise method used to create the discovery, not the contents of discovery themselves.

To me, it's as if SCO is telling IBM they want to know "the precise routes taken by all engineers on their way to work." It's clearly not relevant to the jobs they perform as engineers, and there are good reasons not to produce such information. What if Engineer #1 stopped to pick up a surprise gift for his wife before work? What if Engineer #2 passed by an AutoZone on the way home from work? (Clearly, she's engaged in a conspiracy...).

As you can see, I get a lot of laughs behind the scenes. No one I know who understands the tech takes SCO seriously. That has been true for a long time. This "request" by SCO is no exception. IBM answers SCO in the August 8, 2005 letter, Exhibit 5:

Third, with respect to Ted's request that IBM produce all shell histories and log files related to our preparation of the CMVC server for production, IBM does not have a comprehensive collection of the shell histories and log files. In any case, IBM is not obligated to produce such information, nor was it ordered by the Court to do so.

We'll find out at the hearing if SCO accepts that answer or wishes to soldier on. There is so much redacted from their memorandum in support of their motion, it's not possible to know until the hearing. Want to bet they bring it up again at the hearing? I think they count on it that Wells is not a geek.

So then, the real question has to be, are Boies Schiller clueless about the tech, or knowledgeable but playing a cynical game? That, of course, is a question for the court to finally figure out. But this request is silly, or worse, because SCO appears to be alleging an offense, based on thin air. As you can see, both my tech experts, without knowing what the other would write, said exactly the same thing. It's *normal* to remove what IBM removed. There are good reasons why it's normal. And IBM was never ordered to provide that information anyway. But SCO seems to enjoy portraying everything IBM says and does in a negative light. If you wonder why this case drags on and on, that is why.

IBM has to answer each and every issue, which is the reason why I hope that at the end of the litigation IBM is awarded legal fees, to teach SCO a lesson. At this point, SCO losing, which is what I expect will happen, doesn't seem like enough, does it? Some folks are so lacking in empathy, nothing turns on the light for them but to experience themselves what they inflict on others.

So, the tech claim is off the wall. But those of us who understand the law take SCO's machinations a bit more seriously, because Boies Schiller are not stupid, unless, perhaps, you accept the scriptural definition of stupid. And that makes it worse, really. It's better, in my eyes, to lack the ability to comprehend the tech than to cynically pretend to believe something that no one who gets the tech *could* possibly believe. Which is it here?

I know what it feels like to be falsely accused. It makes your blood boil with righteous indignation. An ethical individual wouldn't do it to their worst enemy, not to win a lawsuit, not for anything. And to watch IBM accused like this, again and again and again, over minutia, things that don't even matter to the litigation even if they were true, apparently just to sully the company's name in public, to try to get them to settle I suppose, as I see it . . . well, it's a horrible tableau. I read once that under the Mosaic Law, one of the laws was that if you falsely accused someone, your punishment was whatever you had tried to make happen to the victim by your false accusation. That's where the eye for an eye phrase comes from. It is sounding mighty good to me right about now.

I always admired David Boies' skill, as you know, those of you who have been with Groklaw from the beginning, and it's been quite painful to watch this lawsuit progress. I got so upset with him that at one point I took down the first article on Groklaw, which included honest-hearted praise of Boies. Then later, I thought I had been silly, and I restored the article. I lost the comments on that article that way, which tells you I don't always get the tech either, but you'll understand my pain if you measure where I am now from where I started. I kept hoping that he got suckered into it, and then was stuck. But I'm afraid not even I can make myself believe that any more. I chose the SCO litigation to cover originally in part because I thought we'd get to see some wonderful lawyering, and I looked forward to sharing my love of the law with you. I'm afraid it hasn't worked out that way, though, has it? Instead, we've watched posturing, delay tactics, and a case that charitably can best be described, as one lawyer did a while back, like this:

"The IBM case now stands for procedural purity, where SCO is given every chance to prove its case, which by now seems clearly to have no merit." -- Thomas Carey, chairman of the business practice group at Boston-based law firm Bromberg & Sunstein LLP.

In short, he was saying the same thing Linus is saying, and you are too -- I know from my email -- that it shouldn't be taking this long. And the saddest part is, I doubt that Boies Schiller understand why we don't admire them for it. Of course, it's really up to the court to set the pace. Lawyers rarely rein themselves in, in my experience. Particularly litigators. They'll just argue and argue, until you make them stop.

One last thing: Part of the 98-page PDF is an exhibit which is the transcript of the December 2003 hearing before Judge Wells. Because we transcribed it back then, instead of doing it again, I placed a link at the appropriate place.

***********************

SNELL & WILMER L.L.P.
Alan L. Sullivan (3152)
Todd M. Shaughnessy (6651)
Amy F. Sorenson (8947)
[address, phone, fax]

CRAVATH, SWAINE & MOORE LLP
Evan R. Chesler (admitted pro hac vice)
David R. Marriott (7572)
[address, phone, fax]

Attorneys for Defendant/Counterclaim-Plaintiff
International Business Machines Corporation

IN THE UNITED STATES DISTRICT COURT

FOR THE DISTRICT OF UTAH

THE SCO GROUP, INC.

Plaintiff/Counterclaim-Defendant,

v.

INTERNATIONAL BUSINESS MACHINES
CORPORATION,

Defendant/Counterclaim-Plaintiff.

_____________________________________

DECLARATION OF
TODD M. SHAUGHNESSY
IN SUPPORT OF IBM'S
OPPOSITION TO SCO'S RENEWED
MOTION TO COMPEL

Civil No. 2:03CV-0294 DAK

Honorable Dale A. Kimball

Magistrate Judge Brooke Wells

1

I, Todd M. Shaughnessy, declare as follows:

1. I represent Defendant/Counterclaim-Plaintiff International Business Machines Corporation ("IBM") in the lawsuit brought by The SCO Group, Inc. ("SCO") against IBM, entitled The SCO Group, Inc. v. International Business Machines Corporation, Civil No. 2:03CV-0294 DAK (D. Utah 2003). This declaration is submitted in support of IBM's Opposition to SCO's Renewed Motion to Compel.

2. Attached hereto are true and correct copies of the following documents:

(a) Exhibit 1 is the Declaration of Todd M. Shaughnessy dated May 3, 2005.

(b) Exhibit 2 is a faxed letter from Peter Ligh to Ted Normand, dated July 5, 2005. Attachment E to Exhibit 2 contains personal identifying information and is therefore being filed separately under seal.

(c) Exhibit 3 is a letter from Edward Normand to David Marriott, dated July 14, 2005.

(d) Exhibit 4 is a letter from Todd M. Shaughnessy to Brent O. Hatch, dated July 19, 2005.

(e) Exhibit 5 is a letter from Todd M. Shaughnessy to Brent O. Hatch, dated August 8, 2005.

(g) Exhibit 6 is the transcript of the December 5, 2003 hearing before Magistrate Judge Wells.

(h) Exhibit 7 is IBM's Second Set of Interrogatories and Second Request for the Production of Documents, dated September 16, 2003.

2

3. I declare under penalty of perjury that the foregoing is true and correct.

Executed: September 26, 2005.

Salt Lake City, Utah

___[signature]___

Todd M. Shaughnessy

3

CERTIFICATE OF SERVICE

I hereby certify that on the 26th day of September, 2005, a true and correct copy of the foregoing was sent by U.S. Mail, postage prepaid, to the following:
Brent O. Hatch
Mark F. James
HATCH, JAMES & DODGE, P.C.
[address]

Robert Silver
Edward Normand
BOIES, SCHILLER & FLEXNER LLP
[address]

Stephen N. Zack
Mark J. Heise
BOIES, SCHILLER & FLEXNER LLP
[address]

___[address]____

Amy F. Sorenson

4

EXHIBIT 1

5

SNELL & WILMER L.L.P.
Alan L. Sullivan (3152)
Todd M. Shaughnessy (6651)
Amy F. Sorenson (8947)
[address, phone, fax]

CRAVATH, SWAINE & MOORE LLP
Evan R. Chesler (admitted pro hac vice)
David R. Marriott (7572)
[address, phone, fax]

Attorneys for Defendant/Counterclaim-Plaintiff
International Business Machines Corporation

_____________________________

IN THE UNITED STATES DISTRICT COURT
FOR THE DISTRICT OF UTAH

______________________________

THE SCO GROUP, INC.

Plaintiff/Counterclaim-Defendant,

v.

INTERNATIONAL BUSINESS MACHINES
CORPORATION,

Defendant/Counterclaim-Plaintiff.

_____________________________________

DECLARATION OF
TODD M. SHAUGHNESSY

Civil No. 2:03CV-0294 DAK

Honorable Dale A. Kimball

Magistrate Judge Brooke Wells

6

I, Todd M. Shaughnessy, declare as follows:

1. I represent International Business Machines Corporation ("IBM") in the above-entitled action brought by The SCO Group, Inc. ("SCO"). This declaration is submitted pursuant to the Court's January 18, 2005 Order Concerning SCO's Renewed Motion to Compel (the "Order").

2. The Court ordered IBM to produce CMVC and RCS data relating to IBM's AIX and Dynix operating systems, including "all versions and changes to AIX and Dynix" (Order at 9-10), and to produce information regarding the 3,000 AIX and Dynix developers who "made the most contributions and changes to the development of AIX and Dynix". (Order at 16.) With respect to the source code produced from CMVC and RCS, the Court ordered IBM to submit an affidavit "specifying the efforts it took to deliver the code from the CMVC and RCS systems". (Order at 10.) With respect to information about the 3,000 AIX and Dynix programmers who "made the most contributions and changes to the development of AIX and Dynix" the Court ordered IBM to submit an affidavit "detailing the process by which the 3,000 were chosen". (Order at 17.)

3. As described in more detail below, IBM has complied with the Court's Order, and has produced all responsive, non-privileged information located after an extensive search. As ordered by the Court, IBM produced from CMVC and from RCS all source code relating to the AIX and Dynix operating systems, including all versions and changes to the code. IBM also produced from CMVC and RCS all documentation related to the AIX and Dynix operating systems, including all programmer's notes, design documents, and white papers. IBM identified all the individuals who created or made changes to AIX or Dynix source code, as recorded by CMVC and RCS, prepared a list of those individuals, together with their login identifiers and contact information (for every person for whom IBM had that information), and provided that

7

list to counsel for SCO on May 3, 2005. As explained below, the number of individuals who contributed source code to AIX and Dynix (as recorded by CMVC and RCS) is less than 3,000; therefore, the individuals identified for SCO constitute all of the individuals that are identified in CMVC and RCS as having made changes to AIX or Dynix. IBM has produced, in the form of CMVC and RCS data, information that shows what changes to the source code were specifically made by each of these individuals. As provided for by the Court in its April 20, 2005 Order Concerning IBM's Motion for Reconsideration, IBM has not searched for and through the files of 3,000 individuals. In accordance with that April 20 Order, IBM will produce, by July 19, 2005, documents from the files of the 100 individuals who made the most contributions and changes to AIX and Dynix source code.

4. IBM also undertook a reasonable search for programmer's notes, design documents, white papers and source code related to the AIX and Dynix operating systems that are not stored in CMVC or RCS and has completed its production of these documents to SCO.

5. Complying with the Court's Order involved more than 4,700 hours of work from more than 400 IBM employees. This does not include the time spent by IBM's counsel and consultants on this project, which was likewise considerable. IBM produced a total of more than 80 GB of source code and other electronic data to SCO, and more than 900,000 pages of paper (which were scanned and produced in electronic form on CDs). 6. Section I describes the steps IBM took to produce AIX source code, documentation (including programmer's notes, design documents, and white papers), and other information related to the AIX operating system from IBM's CMVC system. Section II describes the steps IBM took to produce Dynix source code, documentation (including programmer's notes, design documents, and white papers), and other information related to the Dynix operating system from IBM's RCS system. Section III describes the steps IBM took to

8

search for, collect, and produce AIX source code, programmer's notes, design documents, and white papers outside of IBM's CMVC system. Section IV describes the steps IBM took to search for, collect, and produce Dynix source code, programmer's notes, design documents, and white papers outside of IBM's RCS system. Section V describes IBM's production of information concerning each of the individuals who made changes to AIX or Dynix, including the names and contact information for these individuals, and what changes each individual specifically made.

I. Production of AIX Code and Documents from CMVC

7. CMVC is the source code revision system currently used by IBM's AIX development organization. CMVC has been used in AIX development since 1991. Other than the AIX source code stored in CMVC, IBM does not maintain revision control information for AIX prior to 1991. CMVC does not contain any source code or other information for the Dynix operating system.

8. CMVC provides shared access to source files used in the development of the AIX operating system, allows IBM to keep track of changes that are made to source code files, and ensures that the files are available for viewing or updating only by those with the proper authorization.

9. In accordance with the Court's January 18, 2005 Order, IBM identified and extracted from CMVC all of the source code, documentation, and other information related to the AIX operating system, built an AIX server loaded with the appropriate version of CMVC along with the source code and documentation related to the AIX operating system, tested the system to ensure it was functional, and delivered and installed the server to allow access by SCO.

10. The server contained a fully functional version of the CMVC tool, one hundred percent (100%) of the source code in CMVC that is part of or related to AIX (including the

9

operating system itself, development tools, documentation, and test programs) and one hundred percent (100%) of the documentation in CMVC that is related to AIX, including programmer's notes and design documents. One CMVC design document was redacted to protect attorney-client privileged information. After redaction, IBM was unable to restore the document into the database in electronic form. IBM produced the redacted version of the document along with the CMVC server. The code and documentation that IBM produced from CMVC represent more than 62 GB of data.

11. The particular CMVC server at IBM that contains source code and information related to AIX also contains a large amount of source code and material that is neither part of, nor related to, AIX. IBM did not produce source code or material in CMVC for components that are unrelated to AIX or its code, internal design, or methods. IBM excluded components containing design, manufacturing, and test information specific to IBM hardware products, such as hardware system designs, hardware test exercisers and other hardware test programs, and hardware manufacturing-related components. IBM also excluded firmware source code (machine-level code, distinct from the operating system, that is embedded into a computer hardware device or placed on a computer system to function at a level below the computer's operating system) and other software programs that are distinct from the operating system, such as middleware (software that provides support functions for software applications, such as application-to-application exchange of data, data storage management, and other services) and other applications.

12. The source code that is part of or related to the AIX operating system is not segregated in a single location within CMVC, but rather is commingled with hundreds of thousands of other source code files that are not part of or related to the AIX operating system. A thorough review of the contents of the CMVC system was undertaken to determine which of

10

the thousands of separate "components" within CMVC are part of or related to the AIX operating system.

13. A script -- a small computer program -- was written and executed to map each of the responsive components to the specific source code file names within CMVC. Using the list of file names and identifiers that had been generated, IBM then matched those file names and identifiers to corresponding Source Code Control System ("SCCS") files. These SCCS files are the files maintained by IBM that provide the file development history since 1991 (or the inception of the file) for the particular corresponding source code file in the AIX operating system or related source code. These SCCS files were produced by IBM and allow SCO to reconstruct every version and iteration of AIX since 1991.

14. After all of the source code components for the AIX operating system were identified, the non-source code materials in CMVC that are related to the AIX operating system source code were similarly identified. This included programmer's notes, design documents, and data about version control, users, and change histories.

15. CMVC programmer's notes reflect developer commentary concerning defects and enhancements to AIX, and sometimes contain confidential information from IBM's customers and vendors, or information covered by the attorney-client or work product privileges. If a CMVC programmer's note contained third-party confidential information, the name of the third party (or other information that would identify the third party) was redacted from the copy of the programmer's note to be produced to SCO. Reviewers also redacted privileged information from the copy of the note to be produced to SCO. All redacted information was marked with an appropriate legend. Out of 304,398 programmer's notes produced from CMVC, approximately 100 contain a redaction of customer names or privileged information.

11

16. CMVC also contains more than 2,500 design documents related to AIX. These design documents were also produced to SCO. As noted above in paragraph 10, one design document was redacted to protect attorney-client privileged information and produced to SCO in redacted form.

17. For each source code file produced to SCO, IBM reviewed the origin codes or copyright notices in the code to identify potentially confidential third-party material. IBM located a copy of the relevant confidentiality terms and notified the third party prior to production, when required.

18. IBM obtained an AIX server with the hardware components necessary to produce the data from CMVC. An IBM team created a working copy of the CMVC source code revision system on the server. In order to retain CMVC database functionality that would allow SCO to search and query the code and documentation being produced, IBM copied the entire contents of the CMVC families that contained AIX-related content, and then removed the contents of the source files and programmer's notes that did not relate to AIX.

19. The server, which contained all the information described above, was made available to SCO at the offices of Snell & Wilmer in Salt Lake City, Utah on March 18, 2005. SCO's outside counsel took possession of this server. Along with the server, IBM also has made available to SCO general AIX and CMVC user documentation and a custom README file that contains basic instructions on how to start and navigate the server, CMVC, the necessary IDs and passwords, and a script to instruct SCO how to determine the changes made by each person who contributed code to AIX, as recorded by CMVC. A copy of the README file is attached to this Declaration as Exhibit A. A copy of the script is attached to this Declaration as Exhibit B.

12

II. Production of Dynix Code and Documents from RCS

20. Revision Control System ("RCS") is the source code revision system that was used by Sequent's and IBM's Dynix development organization. It also serves as a shared electronic repository for programmer's notes, design documents, and white papers. The source code revision information in RCS dates back to 1988. Other than the Dynix source code stored in RCS, IBM has searched for, but has not been able to locate, revision control information for Dynix prior to 1988. RCS does not contain any source code or other information for the AIX operating system.

21. IBM has produced one hundred percent (100%) of the source code in RCS that is part of or related to Dynix (including the base operating system and layered products, development tools, and test programs). IBM also extracted, and produced to SCO, one hundred percent (100%) of the Dynix-related design documents, white papers, and programmer's notes that were stored in RCS.

22. The RCS server at IBM that contains source code and information related to Dynix also contains source code and material that is neither part of, nor related to, Dynix. IBM has not produced source code or material in RCS for components that are unrelated to Dynix or its code, internal design, or methods. IBM excluded components containing design, manufacturing, and test information specific to IBM or Sequent hardware products, such as hardware system designs, hardware test exercisers and other hardware test programs, and hardware manufacturing-related components. IBM also excluded firmware source code (machine-level code, distinct from the operating system, that is embedded into a computer hardware device or placed on a computer system to function at a level below the computer's operating system), and other software programs that are distinct from the operating system, such as middleware (software that provides support functions for software applications, such as

13

application-to-application exchange of data, data storage management, and other services) and applications.

23. Extracting the source code that is part of or related to the Dynix operating system required identification of the source code files that are not part of or related to the Dynix operating system. A thorough review of the contents of the RCS system was undertaken by IBM to determine which files are part of or related to the Dynix operating system.

24. Copies of both the source text file and the comma v file for each of the Dynix-related code files were extracted from RCS. Comma v files are the files maintained by RCS that provide the file development history since 1988 (or the inception of the file) for the particular corresponding source code file in the Dynix operating system or related source code. The copies were prepared in tape archive ("tar") format, and then compressed using a zip program to allow them to fit on the CDs. The total amount of this Dynix source code produced from RCS represents more than 17 GB of uncompressed data.

25. For each source code file produced to SCO, IBM reviewed the copyright notices in the code to identify potentially confidential third party material. IBM located a copy of the relevant confidentiality terms and notified the third party prior to production, when required.

III. Production of AIX Design Documents, Programmer's Notes, White Papers and Code Outside CMVC

26. IBM also searched for design documents, programmer's notes, white papers and AIX source code that are not stored in the CMVC database and has completed its production of these documents. Certain AIX development teams keep a large portion of their work files and documents, other than what is required to be stored in CMVC, in shared electronic repositories. To collect a large volume of AIX design documents, programmer's notes, whitepapers, and code, and to avoid redundancy, IBM collected potentially responsive documents from shared electronic repositories at a department, team, and project level. These documents were reviewed for

14

responsiveness, third-party confidential information, and attorney-client privileged communications, and responsive, non-privileged documents have been produced to SCO.

27. IBM also located, from shared electronic repositories and from some data tapes, some source code for the AIX operating system. Although it is likely that this code is duplicative of the AIX source code already produced to SCO on the CMVC server as discussed in Paragraphs 7-19, IBM was unable to confirm that the code is duplicative, and therefore has produced this AIX source code to SCO, on CDs.

28. As I have noted above, IBM does not maintain revision control information for AIX source code pre-dating 1991. To the extent that any code for the AIX operating system (that did not duplicate the code already being produced in CMVC) was found during the search described in Paragraphs 26-27 above, it was produced. Paragraphs 29-31 below describe additional search efforts IBM undertook to locate pre-1991 versions of AIX code. No versions of AIX pre-dating 1991 were found.

29. In the 1980s and early 1990s, IBM prepared vital records backups of AIX source code and transferred them to a remote storage location. At some point in the 1990s, the AIX vital records tapes were transferred to Austin, Texas. In late 2000, the tapes were determined to be obsolete, and were not retained.

30. The AIX development organization contacted other IBM employees who were known or believed to have been involved with the development or product release of AIX versions prior to 1991. In addition, IBM managers and attorneys asked current members of the AIX development organization whether they were aware of the location of pre-1991 releases of AIX source code. No one asked was aware of any remaining copies of pre-1991 AIX source code.

15

31. Source code archives retained by the IBM group responsible for filing IBM copyright registrations and maintaining some of the IBM copyright records were transferred to IBM's Austin site in 2000. IBM searched those archives; all of the source code in the archives are duplicative of AIX versions and changes already produced on the CMVC server as discussed in Paragraphs 7-19.

IV. Production of Dynix Design Documents, Programmer's Notes, White Papers and Code Outside RCS

32. RCS is the shared electronic repository that was used by Dynix developers to store design documents, programmer's notes, and white papers. As discussed above, IBM collected responsive code and documents from RCS. In addition, IBM searched for and retrieved potentially responsive materials from archived Sequent records. These documents were reviewed for responsiveness, third-party confidential information, and attorney-client privileged communications, and all responsive, non-privileged documents have been produced to SCO.

33. As noted above, IBM searched for, but was unable to locate, revision control information for Dynix prior to 1988. IBM did locate some pre-1988 copies of archived Dynix source code files (without revision control information), which were produced to SCO on CDs.

V. Contributors to AIX and Dynix

34. As IBM previously noted in response to SCO's Interrogatory 5, the list of 7,200 individuals who have or have had access to AIX or Dynix source code are the people who work or worked on developing AIX and Dynix. Not all of these individuals, however, have made contributions or changes to AIX or Dynix source code; for example, a development supervisor may have access to CMVC or RCS, but may have never personally made any changes to the code. In response to the Court's order that IBM provide information as to which persons made contributions or changes to AIX or Dynix source code, IBM has identified the names, user IDs,

16

and contact information (to the extent IBM has such information in its records) for all of the individuals recorded by CMVC and RCS as having created or made changes to AIX or Dynix or related source code files, and has produced all such information to SCO.

35. The total number of individuals who are recorded by CMVC or RCS as having made contributions or changes to AIX or Dynix or related source code files is 2,704. This number, while less than the 3,000 individuals contemplated by the Order, includes all individuals who are recorded by CMVC and RCS as having made contributions and changes to AIX or Dynix.

36. The list of AIX contributors contains 2,234 names. These names were obtained by using CMVC tools to determine which CMVC users have ever created or modified AIX or related source code since CMVC versioning was initiated in 1991. This list includes all of the persons who are recorded by CMVC as having made changes to AIX source code. The list was examined manually to merge the data for users who had multiple IDs or name changes.

37. IBM has also produced to SCO the user IDs for all of the individuals who made changes or contributions to Dynix, as recorded by RCS. The list contains 470 user IDs and identifies the number of files created or modified by each user ID. IBM reconstructed and reviewed archived Sequent records and questioned former Dynix developers, and has provided to SCO all of the corresponding employee names and contact information that were obtained.

38. The CMVC and RCS revision control data produced by IBM include complete information (to the extent such information is recorded by CMVC or RCS) as to which individuals made which specific contributions or changes to AIX or Dynix source code, as well as when each such change was made.

39. For AIX, the contributions and changes made by each person can be determined by running a simple script, a copy of which was produced to SCO along with the CMVC system

17

on March 18, 2005. A copy of the script is also attached to this Declaration as Exhibit B. Using the script, SCO can type in any individual user ID, and the script will produce as its output a detailed list of all of the contributions and changes made by that user.

40. For Dynix, information about each change made to each file in the Dynix source code, including the date and time the change was checked-in to the RCS system, who checked-in the change, the number of lines of code added and deleted from the previous revision of the file, and a log message entered by the person who checked-in the change can be ascertained using standard RCS tools, such as the "rlog" command. For example, to determine the change history of the base_callback.c,v file in the 4.6.1 version of the Dynix base operating system, SCO can type "rlog base_callback.c.,v", which results in the following output:

$ rlog base_callback.c,v

RCS file: base_callback.c,v; Working file: base_callback.c
head: 1.4
branch:
locks: ; strict
access list:
symbolic names: v4_6_1p: 1.4.3; v4_6_1: 1.4; v4_6_0p: 1.4.2; v4_6_0: 1.4;
comment leader: * * *
total revisions: 6; selected revisions: 6
description:
base_callback.c

---------------------------------------

revision 1.4
date: 97/09/29 18:20:23; author: mjs; state: Exp; lines added/del: 7/9
branches: 1.4.2; 1.4.3;
Made appropriate use of SYMUSED lint directive in this file.
PR #230499 / SCN rto1031.

---------------------------------------

revision 1.3
date: 95/11/03 03:08:44; author: mjs; state: Exp; lines added/del: 5/2 lint fix.
--------------------------------------

revision 1.2
date: 95/11/03 02:01:20; author: mjs; state: Exp; lines added/del: 20/2
Added lint ref for base_callback.
--------------------------------------

revision 1.1
date: 95/11/02 20:14:52; author: mcneil; state: Exp;
Initial revision
--------------------------------------

revision 1.4.3.1
date: 20/1./3. 6.:0.:6.; author: hbeare; state: Exp; lines added/del: 6/2
Branch for v4_6_1p
--------------------------------------

revision 1.4.2.1
date: 20/0./9. 5..8.:1.; author: breazile; state: Exp; lines added/del: 6/2
Branch for v4_6_0p
----------------------------------------

18

41. I declare under penalty of perjury that the foregoing is true and correct.

Executed: May 3, 2005

Salt Lake City, Utah

___[signature]____
Todd M. Shaughnessy

19

CERTIFICATE OF SERVICE

I hereby certify that on the 3rd day of May, 2005, a true and correct copy of the foregoing was sent by U.S. Mail, postage prepaid, to the following:
Brent O. Hatch
Mark F. James
HATCH, JAMES & DODGE, P.C.
[address]

Stephen N. Zack
Mark J. Heise
BOIES, SCHILLER & FLEXNER LLP
[address]

Robert Silver
BOIES, SCHILLER & FLEXNER LLP
[address]

____[signature]____

Todd M. Shaughnessy

20

EXHIBIT 2

21

[CRAVATH, SWAINE & MOORE LLP letterhead]

July 5, 2005

Dear Ted:

Enclosed please find a revised version of Attachment E to IBM's Responses and Objections to SCO's First Set of Interrogatories. This updates the contact information of the listed persons, such as email addresses that may have been used by IBM employees to make Linux contributions (including email addresses without an "ibm" in the domain name).

As you know, IBM previously produced material that it offered unsuccessfully to Linux that may not be publicly available (because it was not included in Linux). Those materials were identified in our April 19, 2004 response to SCO's Interrogatory No. 6. We updated that production last week, on July 1, 2005. For your convenience, following is a listing of the bates numbers of the documents reflecting IBM's "non-public Linux contributions": 1710089569-1710089572; 1710089869-1710089875; 1710127757-1710128552; 1710132518-1710134552; 1710137835-1710138245; 181595356-181595400; 181595402-181595428; 181595497-181595499; 181595555-181595561; 181595664-181595734; 181595736-181595767; 181595769-181595770; 181595837-181595853; 181595867-181595868; 181595980-181596088; 181596760-181596769; 181596825-181596861; 181596873-181596980; 181596985-181596996; 181596999-181597185; 181597315-181597317; 181597575-181597587; 181597686-181597744; 181597747-181597748; 181597750-181597820; 181607890-181607892; 181609501; 181609861; 181610175-181610176; 181610232-181610243; 181610250-181610262;181610413-181610419;181610422-181610425; 181610428- 181610484;181610489-181610502;181610600-181610608;181617209-181617221; and 1710262769-1710263151.

22

Please let me know if you have any questions about these or any of our other productions.

Very truly yours,

[signature]

Peter Ligh

Ted Normand, Esq.
Boies, Schiller & Flexner LLP
[address]

Encl.

BY FAX AND FEDERAL EXPRESS

23

ATTACHMENT E TO EXHIBIT 2

This document contains personal identifying information and is therefore

being filed separately under seal.

24

EXHIBIT 3

25

[Boies Schiller letterhead, blacked out]

July 14, 2005

By Facsimile and First-Class Mail
David Marriott, Esq.
Cravath, Swaine & Moore LLP
[address] Re: SCO v. IBM, Civil No. 2:03CV-0294DAK

Dear David:

I write to identify deficiencies in the production of the CMVC (AIX) database (the "CMVC/AIX Production") that IBM has made in response to the Magistrate Court's Order Regarding SCO's Renewed Motion to Compel Discovery dated January 18, 2005 (the "January 18 Order").

As an initial matter, IBM has not produced any AIX source code prior to 1991. Todd Shaughnessy has asserted that "CMVC has been used in AIX development since 1991. Other than the AIX source code stored in CMVC, IBM does not maintain revision control information for AIX prior to 1991." Affidavit of Todd Shaughnessy (May 3, 2005) ("Shaughnessy Aff.") ¶7. That might be true, but irrespective of the availability of revision control information prior to 1991, SCO has asked IBM to produce AIX code prior to 1991, in whatever format IBM has stored such code, and the Court has ordered IBM to produce it. Our information is that IBM does possess the source code for all versions of AIX prior to 1991. Please let me know by July 19 whether IBM will produce all code, notes and revision history for AIX prior to 1991.

Similarly, SCO asked IBM: to identify the contributions that IBM has made to Linux, the specific identity of the contributors, and the specific contributions that each contributor made. Although IBM claims to have identified IBM's non-public contributions to Linux and the contributors (as set forth in Peter Ligh's July 5 letter to me), IBM has not identified the specific contributions that each contributor made. Nor has IBM identified the specific contributions that each contributor made with respect to IBM's public contributions to Linux. Under the Magistrate Court's March 2003, January 2005, and April 2005 Orders, IBM must produce that category of information. Please let me know by July 19 whether and when IBM will identify the specific IBM contributions (both public and non-public) to Linux that each contributor has made.

In addition, based on our review of the CMVC/AIX Production and as detailed below, we disagree with Mr. Shaughnessy's assertion that the CMVC/AIX Production contains "one hundred percent (100%) of the source code in CMVC that is part of or

26

[Boies Schiller logo]

David Marriott, Esq.
July 14, 2005
Page 2

related to AIX (including the operating system itself, development tools, documentation, and test programs)." Shaughnessy Aff. ¶10.

Approximately 245,325 Missing Files

We have identified approximately 245,325 entries in the CMVC database for which no file exists in the file trees associated with AIX (the "Missing Files"). 1 Most of the Missing Files are marked "non-responsive." Since "non-responsive" is not a term used in software programming, we infer that IBM removed the files marked "non-responsive" because IBM concluded that the files were not responsive to the January 18 Discovery Order. Please promptly advise me if our conclusion is inaccurate. Notwithstanding the designation of "non-responsive," a large number of the file names associated with the Missing Files relate to AIX kernel code, AIX shared libraries, and AIX compilers -- source code that clearly is at issue in the litigation. 2 It appears, for example, that at least 450 of the Missing Files relate to the Journaling File System (JFS) 3 As SCO has explained to the Court, IBM contributed JFS to Linux without modification, and JFS is one of the components of AIX centrally at issue in this litigation.

Mr. Shaughnessy has stated that in preparing its CMVC/AIX Production, IBM "removed the contents of the source files and programmer's notes that did not relate to AIX." Shaughnessy Aff. ¶18. As the foregoing files are part of or relate to AIX, we hereby request that you promptly produce all of the Missing Files and any and all other files related to AIX otherwise not produced. We also request that you produce the log history showing the "contents" of the source files and programmer's notes that IBM removed from the CMVC/AIX Production so that we may verify the extent to which AIX-related files may have been removed. The Court ordered IBM to produce "ALL AIX information" on CMVC, January 18 Order at 10; our request for the log is a logical and appropriate extension of IBM's discovery obligation.

_____________________

1The file trees associated with AIX in CMVC are /family/aix/vc/ and /family/aix/admin/.

2For example, the file marked as "Non-responsive5742" corresponds to 252 files in the directory src/bos/kernel/base/. The file marked "Non-responsive575" corresponds to 32 files in the directory src/bos/kernel/fs/. The file marked "Non-responsive5760" corresponds to 3 files in the directory src/bos/kernel/init/. The file marked "Non-responsive5761" corresponds to 3 files in the directory src/bos/kernel/lib/libcsys/, and 4 files elsewhere in src/bos/kernel/lib/. The file marked "Non-responsive5765" corresponds to 41 files in the directory src/bos/kernel/mm/. The file marked "Non-responsive5768" corresponds to 23 files in the directory src/bos/kernel/lib/libcnet/.

3 The Missing Files related to JFS were identified by a search for files whose names contain the characters "jfs".

27

[Boies Schiller logo]

David Marriott, Esq.
July 14, 2005
Page 3

Approximately 152,887 Un-Catalogued Files

We have identified approximately 152,887 files that do appear in the AIX file tree, but do not have a corresponding indexed entry in the CMVC database (the "Un-Catalogued Files"). IBM uses the CMVC database entries to provide ready access to, and navigation of, the files in CMVC. Without the corresponding CMVC database entries, it is impossible to access or review the Un-Cataloged Files in the way that IBM has maintained them in the ordinary course of business. In addition, barring an exhaustive manual examination of these files, it is very difficult for us to determine to which AIX components each file belongs, and it is usually impossible for us to know the name of each file. We therefore request prompt production of the CMVC database entries that correspond properly to the 152,997 Un-Catalogued Files, and any and all database entries related to AIX otherwise not produced.

Removal of CMVC Change-Log History

Upon exit of any command-line shell in AIX, the system apparently retains an annotated history of commands run by the user. We have reviewed the user history archive of the copy of AIX produced in the CMVC/AIX Production and have identified (among others) the following commands that IBM appears to have run in preparing the CMVC/AIX Production:

  • rm bash_history. This command removes the history of past events. Such history is useful for repeating past commands. We request that you promptly produce all shell history resulting from your preparation of the CMVC/AIX Production so that we may identify more precisely the acts taken to prepare the CMVC database for production. This request includes the bash_history for all root users as well as all administrators.

  • rm log. This command removes the log file. The log demonstrates a proper history of commands run against the operating system. We request that you promptly produce all log files related to your preparation of the CMVC/AIX Production so that we may identify more precisely the acts taken to prepare the CMVC database for production. This request includes the file log for all root users as well as all administrators.

Thank you for your prompt attention to these issues. As I am sure you appreciate, IBM's complete production of all of the AIX-, CMVC-, and Linux-related material that

28

[Boies Schiller logo]

David Marriott, Esq.
July 14, 2005
Page 4

SCO has requested and that the Court has repeatedly ordered IBM to produce is a prerequisite to SCO's compliance with the Court's revised scheduling order.

Sincerely,

___[signature]___
Edward Norman

cc: Brent Hatch
Todd M. Shaughnessy

29

EXHIBIT 4

[Snell & Wilmer letterhead]

July 19, 2005

VIA FACSIMILE AND U.S. MAIL Brent O. Hatch
HATCH, JAMES & DODGE, P.C.
[address]

Re: SCO v. IBM; IBM v. SCO

Dear Brent:

I write in response to Ted Normand's July 14, 2005 letter to David Marriott.

First, Ted's concern that IBM has withheld pre-1991 AIX source code is unfounded. To the extent there is AIX source code in CMVC that was written prior to 1991 and maintained in CMVC, we have produced it. We have repeatedly searched for, but have been unable to find, any pre-1991 AIX source code or revision control information other than that which may be in CMVC. Please provide us with the basis for Ted's statement: "Our information is that IBM does possess the source code for all versions of AIX prior to 1991". If you have any specific information about where source code for versions of AIX prior to 1991 are located within IBM, let us know and we will follow up on it.

Second, with respect to IBM's Linux contributions, the Court expressly ruled in an Order dated March 3, 2004 (and reaffirmed in its April 19, 2005 Order) that IBM is not required to produce to SCO information concerning IBM's Linux contributions insofar as such information is publicly available. The Court only ordered IBM to produce "all non-public Linux contribution information". (April 19, 2005 Order at 5-6.) As detailed in Peter Ligh's July 5 letter to Ted, IBM has fully complied with that obligation.

The issues you raise under the headings of "Approximately 245,325 Missing Files", "Approximately 152,887 Un-Catalogued Files", and "Removal of CMVC Change-Log History" require more investigation and analysis. Because some of the people at IBM who were involved in preparing the CMVC data for production to SCO several months ago are currently on vacation, I am unable to provide a response to those issues at this time. We will provide you with responses to those issues as soon as we can.

31

[Snell & Wilmer logo]
Brent O. Hatch
July 19, 2005
Page 2

Very truly yours,

____[signature]____

Todd M. Shaughnessy

TMS:dw
cc: Edward Normand
David Marriott
Peter Ligh
Amy Sorenson

32

EXHIBIT 5

33

[Snell & Wilmer letterhead]

August 8, 2005

VIA FACSIMILE AND U.S. MAIL

Brent O. Hatch
HATCH, JAMES & DODGE, P.C.
[address]

Re: SCO v. IBM; IBM v. SCO

Dear Brent:

I write to follow up on my July 19, 2005 letter to you, responding to Ted Normand's July 14, 2005 letter to David Marriott.

First, with respect to the issues raised under the heading "Approximately 245,325 Missing Files," Ted's letter does not identify, and we have been unable to determine, how he arrived at the number 245,325. However, as I stated in my May 3, 2005 declaration, we did not produce to SCO any components in CMVC that are unrelated to AIX or its code, internal design, or methods, such as code and information relating to IBM hardware, firmware, manufacturing-related components, and middleware and other software applications. Components that were withheld were replaced with a "non-responsive" placeholder. As we have repeatedly informed you, the CMVC server at IBM that contains source code and information related to AIX also contains a large amount of source code and other material that is neither part of, nor related to, AIX. Furthermore, directory names such as "src/bos/kernel/base" that are recorded in the CMVC database are directory names that do not necessarily correspond to the AIX operating system. We have investigated each of the specific "non-responsive" components identified in Ted's letter, and have confirmed that these components are neither part of nor related to the AIX operating system, and were thus properly withheld from production. If you have a reasonable basis to believe that any other specific "non-responsive" files contain information related to the AIX operating system, please identify these files and why you believe they may be related to AIX. As for Ted's request that we provide a "log history showing the `contents' of the source files and programmer's notes that IBM removed from the CMVC/AIX Production," IBM is not obligated to produce such information. Nor, in any event, have we maintained such a comprehensive "log history."

34

[Snell & Wilmer logo]

Brent O. Hatch
August 8, 2005
Page 2

Second, with respect to the issues raised under the heading "Approximately 152,887 Un-catalogued Files," Ted's letter does not identify, and we have been unable to determine, how he arrived at the number 152,887 (or, as stated later in the letter, 152,997). Based on Ted's description of these "Un-Catalogued Files," however, it appears that he is referring to instances in which there is a source code file without any corresponding entry in the CMVC database describing that source code file. As you may know, CMVC consists of two separate layers: the underlying source code files (SCCS files), and a database directory of those files. We believe that during normal development activity, operations such as creating a new file and then undoing the create can leave behind an SCCS file, with no corresponding information in the CMVC database directory. In preparing the CMVC server for production, we used the database to identify which CMVC components were neither part of nor related to AIX, and removed the corresponding source code files. We believe the "Un-Catalogued Files" likely include both AIX-related files, and non-AIX-related files. However, because the "Un-Catalogued Files" did not have database entries allowing us to determine whether they were or were not part of or related to AIX, we did not delete any of the underlying source code files, and produced the entirety of these "Un-Catalogued Files" to SCO. In short, the CMVC data we produced was, if anything, overinclusive.

Third, with respect to Ted's request that IBM produce all shell histories and log files related to our preparation of the CMVC server for production, IBM does not have a comprehensive collection of the shell histories and log files. In any case, IBM is not obligated to produce such information, nor was it ordered by the Court to do so.

Very truly yours,

___[signature]___
Todd M. Shaughnessy

TMS:dw
cc: Edward Normand
David Marriott
Peter Ligh
Amy Sorenson

35

EXHIBIT 6

36

IN THE UNITED STATES DISTRICT COURT

FOR THE DISTRICT OF UTAH

CENTRAL DIVISION

In re:

SCO GROUP,

Plaintiff,

v.

INTERNATIONAL BUSINESS MACHINES,

Defendant.

Case No. 2:03-cv-294

BEFORE THE HONORABLE BROOKE C. WELLS

December 5, 2003

Transcript of Motion to Compel

Dawn E. Brunner-Hahn, RPR
ALPHA COURT REPORTING SERVICE
[address, phone, fax]

37

APPEARANCES OF COUNSEL:

For the Plaintiff:

HATCH, JAMES & DODGE
BY: Brent O. Hatch
Attorney at Law
[address]

Kevin P. McBride
Attorney at Law

For the Defendant:

CRAVATH, SWAINE & MOORE
BY: David R. Marriott
Attorney at Law
[address]

SNELL & WILMER, L.L.P.
BY: Todd M. Shaughnessy
Attorney at Law
[address]

37

[Transcript of the hearing.]

38-93

EXHIBIT 7

94

SNELL & WILMER LLP
Alan L. Sullivan (3152)
Todd M. Shaughnessy (6651)
[address, phone, fax]

CRAVATH, SWAINS & MOORE LLP
Evan R. Chesler (admitted pro hac vice)
Thomas G. Rafferty (admitted pro hac vice)
David R. Marriott (7572)
[address, phone, fax]

Attorneys for Defendant/Counterclaim-Plaintiff
International Business Machines Corporation

IN THE UNITED STATES DISTRICT COURT

FOR THE DISTRICT OF UTAH

____________________________________

THE SCO GROUP, INC.,

Plaintiff,

-against-

INTERNATIONAL BUSINESS
MACHINES CORPORATION,

Defendant.

__________________________________

DEFENDANT IBM'S SECOND SET
OF INTERROGATORIES AND
SECOND REQUEST FOR
PRODUCTION OF DOCUMENTS

Civil No. 2:03CV-0294 DAK

Honorable Dale A. Kimball

___________________________________

Pursuant to Rules 33 and 34 of the Federal Rules of Civil Procedure, defendant International Business Machines Corporation ("IBM") submits this Second Set of Interrogatories and Second Request for the Production of Documents to plaintiff The SCO Group, Inc. ("plaintiff").

95

Plaintiff is directed to give answers to the written interrogatories separately, fully, in writing, under oath, and in accordance with the following definitions and instructions. Plaintiff is requested to produce the documents and things in its possession, custody or control pursuant to the document requests.

Answers to the interrogatories, and all documents and things responsive to the document requests must be served on the undersigned attorneys for IBM at the offices of Cravath, Swaine & Moore LLP, [address] within 30 days of service of these interrogatories and document requests.

Interrogatories

INTERROGATORY NO. 12.

Please identify, with specificity (by file and line of code), (a) all source code and other material in Linux (including but not limited to the Linux kernel, any Linux operating system and any Linux distribution) to which plaintiff has rights; and (b) the nature of plaintiff's rights, including but not limited to whether and how the code or other material derives from UNIX.

INTERROGATORY NO. 13:

For each line of code and other material identified in response to Interrogatory No. 12, please state whether (a) IBM has infringed plaintiffs rights, and for any rights IBM is alleged to have infringed, describe in detail how IBM is alleged to have infringed plaintiff's rights; and (b) whether plaintiff has ever distributed the code or other material or otherwise made it available to the public, as part of a Linux distribution or otherwise, and, if so, the circumstances under which it was distributed or otherwise made available, including but not limited to the product(s) in which it was distributed or made available, when it was distributed or made available, to whom it was distributed or made

96

available, and the terms under which it was distributed or made available (such as under the GPL or any other license).

Document Requests

REQUEST NO. 74:

All documents relating to SCO Forum 2003.

REQUEST NO. 75:

All documents relating to the information requested in Interrogatory Nos. 12-13.

Instructions and Definitions

Defendant IBM hereby incorporates by reference all instructions, definitions and rules contained in Rule 33 and Rule 34 of the Federal Rules of Civil Procedure and the local rules or individual practices of this Court and supplements them with the definitions and instructions set out in Defendant IBM's First Set of Interrogatories and First Request for the Production of Documents, which are incorporated herein by reference.

DATED this 16th day of September, 2003.

SNELL & WILMER LLP

___[signature]___
Alan L. Sullivan
Todd M. Shaughnessy

CRAVATH, SWAINE & MOORE LLP
Evan R. Chesler
Thomas G. Rafferty
David R. Marriott

Counsel for Defendant/Counterclaim-Plaintiff
International Business Machines Corporation

97

Of counsel:

INTERNATIONAL BUSINESS MACHINES CORPORATION
Donald J. Rosenberg
Alec S. Berman
[address, phone]

Attorneys for Defendant/Counterclaim-Plaintiff
International Business Machines Corporation

98


  


Declaration by Todd M. Shaughnessy in Support of IBM's Opposition to SCO's "Renewed" Motion to Compel, as text | 440 comments | Create New Account
Comments belong to whoever posts them. Please notify us of inappropriate comments.
OT here please
Authored by: troll on Sunday, October 02 2005 @ 04:25 AM EDT
If you want to post links please do not forget to use Preview button and set
your Post Mode to "HTML"
Example:
<a href="http://www.example.com/">Like this</a>

Yours truly ...

[ Reply to This | # ]

Correction/Error
Authored by: belarinmtl on Sunday, October 02 2005 @ 04:34 AM EDT
Declaration of Amy Sorenson should be this link

[ Reply to This | # ]

Declaration by Todd M. Shaughnessy in Support of IBM's Opposition to SCO's "Renewed" Motion to C
Authored by: billposer on Sunday, October 02 2005 @ 04:41 AM EDT

Another point to consider is that many people don't like to have command history carry over to their next login session ( which might well be their next work day), which is what happens if you leave shell logs in place, simply because they clutter up one's command history with stuff that is no longer relevant. Whenever I have used a shell that defaulted to this behavior, I have set things up to delete the history when I logged out.

I wouldn't be surprised if IBM staff did something like this for the perfectly innocuous purpose of preventing clutter in their command history, without even thinking of security considerations.

[ Reply to This | # ]

Declaration by Todd M. Shaughnessy in Support of IBM's Opposition to SCO's "Renewed" Motion to C
Authored by: jeremyg on Sunday, October 02 2005 @ 04:54 AM EDT
It's interesting that even Business Week doesn't worry too much about this case. At least not enough to get their facts straight :-)

Do you still worry about the SCO Group (SCOX )and its suit charging IBM with improperly taking Linux code and handing it over to Linux developers?

Or is this a new claim by SCO ? "You gave your Linux programmers some Linux code ! How dare you !"

Cheers

Jeremy

[ Reply to This | # ]

  • makes sense - Authored by: Anonymous on Sunday, October 02 2005 @ 01:21 PM EDT
Who exactly was it that has been browsing the logs on this AIX System
Authored by: yorkshireman on Sunday, October 02 2005 @ 04:59 AM EDT
I thought that SCO had to employ (trusted) third parties to look at the AIX code not their own staff.

If so who was it that presumably got root access to this system and started looking in other users private files?

Did they work for SCO?

Did they ask for permission?

[ Reply to This | # ]

No Homegrown Code!!!
Authored by: Anonymous on Sunday, October 02 2005 @ 05:00 AM EDT
UNBELIEVABLE!!
After all it turns out that IBM did not contribute homegrown code to Linux!

[ Reply to This | # ]

Litigation Companies and Costs
Authored by: PM on Sunday, October 02 2005 @ 05:12 AM EDT
I may be rather naive, but as far as I can see, Courts have yet to catch up whth
companies whose principal business is litigation. Traditionally, litigation has
been a relatively small part of companies' operations, so there is sufficient
cash flow to meet costs and damages.

A litigation company may be a one way street. If it wins there is a bonanza for
its stockholders, if it loses, the company goes bankrupt.

In the SCO case surely the time has come for SCO to be asked - if you want more
discovery and you ultimately lose the case, can you actually afford to meet
IBM's costs - perhaps you better lodge a bond to cover such costs in case you
lose, so IBM (and Novell etc) will not be out of pocket.

Again, I am being far too naive.

[ Reply to This | # ]

"Our information..."
Authored by: Anonymous on Sunday, October 02 2005 @ 05:48 AM EDT
>Check out the July 14, 2005 letter from Ted Normand of Boies Schiller to
David Marriott, Exhibit 3:

Our information is that IBM does possess the source code for all versions of
AIX prior to 1991.<

SCO's lawyers are very lucky I'm not the judge. At the next hearing they would
have three options:

1. Tell me where this "information" came from.
2. Admit they were bluffing.
3. Be held in contempt.

[ Reply to This | # ]

1991
Authored by: Anonymous on Sunday, October 02 2005 @ 07:15 AM EDT

Hmm... It is ironic that SCO "need" versions of AIX before the date
of first release of Linux kernel.

I do like the IBM argument that a file system is not part of the AIX Operating
System. From a technical perspective this is just good system design (see Hurd
rather than Linux). The choice of file system is little different to the choice
of web-browser or spreadsheet.

[ Reply to This | # ]

Lack of .bash_history Not Suprising!
Authored by: chris_bloke on Sunday, October 02 2005 @ 07:31 AM EDT

Two big points:

  1. The IBM AIX users I've come across *DONT*USE*BASH*! They use ksh (ugh). I don't believe that bash is part of the standard install (sadly). Ksh can have its own history file, but they don't ask for that..
  2. They certainly wouldn't dare change roots shell to something that lives in /usr/bin (yes, AIX doesn't put bash in /bin).

Alsom, being pedantic, it's .bash_history, not bash_history...

[ Reply to This | # ]

PJ, you won't get your wish :-)
Authored by: Anonymous on Sunday, October 02 2005 @ 07:55 AM EDT
" ... I hope that at the end of the litigation IBM is awarded legal fees,
to teach SCO a lesson."

SCO will be bankrupt long before these cases are resolved. There will be
nothing left to pay the legal fees. They know what the future is and they don't
care.

My wish is that the individuals involved he held to account criminally and
civilly. THAT would teach them a lesson.

[ Reply to This | # ]

bash_history for AIX root users?
Authored by: Anonymous on Sunday, October 02 2005 @ 08:13 AM EDT
Did this strike anyone else as odd:

We have reviewed the user history archive of the copy of AIX ...

This request includes the bash_history for all root users as well as all administrators.

Last I knew, the root shell on AIX is a statically linked Bourne shell, maybe Korn by now, but certainly not Bash. On Unix, logging in as the root user is sometimes referred to as "god mode", for good reason, and competent administrators don't spend any more time in that mode than they have to.

Running or managing services such as version control systems as root is a newbie mistake that I'd be very surprised to see IBM's Unix administrators making. Even if they did, as mentioned above it's unlikely they'd be doing it in a Bash shell on AIX. Granted, lots of people use Bash on "real" Unix, but I wouldn't expect to see it set up as the default shell on many root accounts.

That being the case, I also wouldn't expect to see any Bash histories on IBM's AIX root accounts.

Unix doesn't have any well-defined notion of what an "administrator" is (unlike Windows, where "administrator" is analogous to Unix's "root"), so asking for administrators' shell histories is sufficiently ambiguous to render the request unfullfillable (which could always be SCO's intent).

[ Reply to This | # ]

Declaration by Todd M. Shaughnessy in Support of IBM's Opposition to SCO's "Renewed" Motion to C
Authored by: Steve Martin on Sunday, October 02 2005 @ 08:15 AM EDT

Upon exit of any command-line shell in AIX, the system apparently retains an annotated history of commands run by the user. We have reviewed the user history archive of the copy of AIX produced in the CMVC/AIX Production and have identified (among others) the following commands that IBM appears to have run in preparing the CMVC/AIX Production:

rm bash_history. This command removes the history of past events.

See, here's the thing that I have to wonder about. They're right that removing bash_history clears out the remembered sequence of command-line entries. However, if bash_history was removed, then how did TSG extract this line? If IBM entered "rm bash_history" from a bash prompt, it would have removed the very line TSG now claims to have found. If, on the other hand, IBM had issued that command from some other shell (such as csh), then one would presume that they used that shell to prepare the CMVC machine for production, so removing bash_history would have simply been (as PJ's experts suggest) a routine step, one that is totally irrelevant to the steps IBM took in preparing the archive for production.

We request that you promptly produce all shell history resulting from your preparation of the CMVC/AIX Production so that we may identify more precisely the acts taken to prepare the CMVC database for production.

Yet another clue that TSG's lawyers either don't get the tech, or else are deliberately being obtuse. The "rm bash_history" command doesn't physically remove the file and store it in another location; it simply deletes it. What TSG is asking for here is the production of material that IBM deleted from the server. It is not possible.

This request includes the bash_history for all root users as well as all administrators.

A UNIX company asking for material for "all root users as well as all administrators"?? My Linux machine only has one "root" user. Creating more than one account as user zero (the root user) is A Bad Thing®. One would think a UNIX company would know that. (Of course, we're talking about their lawyers rather than the company, so I guess that's understandable.)

rm log. This command removes the log file.

Um, okay, exactly which log file are we talking about here, guys? I have a bunch of 'em on my system.

---
"When I say something, I put my name next to it." -- Isaac Jaffee, "Sports Night"

[ Reply to This | # ]

Declaration by Todd M. Shaughnessy in Support of IBM's Opposition to SCO's "Renewed" Motion to C
Authored by: LarryVance on Sunday, October 02 2005 @ 08:56 AM EDT
Boies Schiller are not stupid, unless, perhaps, you accept the scriptural definition of stupid.

What is the scriptural definition of stupid?

---
http://allstateinsurancesucks.com/

[ Reply to This | # ]

4,700 hours of work!!
Authored by: Anonymous on Sunday, October 02 2005 @ 09:52 AM EDT
4,700 hours of work.

To put that number in perspective, consider that there are about 200 working
days in a year. So one full-time employee works about 200*8 = 1600 hours/year.

The cost of this discovery *just in worker hours* is at least the full yearly
salaries of three people. I wouldn't be surprised if the total price tag for
this exercise exceeded $300,000 -- it is certainly at least 6 figures.


I hope SCO is ordered to pay IBM's costs for all this discovery, once it becomes
clear that it was completely irrelevant to the case and SCO asked for it solely
to delay the case and inconvenience IBM.

[ Reply to This | # ]

Hopefully to help PJ
Authored by: inode_buddha on Sunday, October 02 2005 @ 10:09 AM EDT
Hopefully to help PJ, the part about bash_history and log files isn't
programming at all. It's the same thing as asking for "My Documents"
on Windows. If you do something like "ls -al" (without the quotes) in
your home directory on any UNIX-like machine, you will see those files (which
are normally hidden).

That is just a part of being a normal user on a system, nothing special about
it. You can even use a plain text editor to read them, most often. I'm not sure,
but I think even Mac OSX has the same thing.

---
-inode_buddha
Copyright info in bio

"When we speak of free software,
we are referring to freedom, not price"
-- Richard M. Stallman

[ Reply to This | # ]

The Purpose Is To Get Before A Local Jury With No Evidence...
Authored by: Anonymous on Sunday, October 02 2005 @ 10:18 AM EDT
Delay has been utilized all along. However, delay cannot be the
final objective. Sooner or later, delay will fail. Next, is either
bankruptcy or going before a local jury without evidence. In the
endgame, BSF wins for their client on a technically and the US
legal system has been seriously perverted as the weapon of the
bad guys.

The A team is probably eager to go before a jury without any
evidence since all the legal evidence favors IBM. BSF is infamous
for playing judges and juries.

I find it unacceptable that TSG has never shown the court any
legal evidence while BSF uses the judges to push IBM around.
How can these judges allow a $5 billion lawsuit to go on for
three years without a single item of evidence that will be an
exhibit before a jury?

This smacks of wrong! This puts a damper on the whole tech
community. This drives companies offshore. This forces
investors to look elsewhere. This dries up the seed funding.
This looks like greed.

[ Reply to This | # ]

Link in article
Authored by: Anonymous on Sunday, October 02 2005 @ 10:43 AM EDT
The article is by Steven J. Vaughan-Nichols and date August 4, 2005 and
publihsed by eWeek. He seem to regard the Novell case as central to SCO defense
in the multitude of case it is in. For the record i dont think the Novell case
has any bearing with the India case which seems to be a contract dispute. Also
the ownership issue alone will not help SCO much over non payment of royalities,
Lanham Act cases and other miscellanous problems SCO has brought onto its own
head.

Be that as it may he quotes a lawyer John Ferrell on Novelles who claims:

"The claims and counterclaims involving rejected audit demands, public
slander, missed royalty payments, false securities filings, and the like, are
all sideshows; contract interpretation is the big-top, main event."

If this is so why does Ferrell not note two outstanmd problems (1) that fact
that SCOG is not the same as Santa Cruz and that there is no record of a
copyright transfer from Santa Cruz to SCOG and (2) the requirements of the
controlling Jasper case concerning copyright transfer. SCOG has to first produce
the evidence of the transfer and then convince the court that this set of
transfers satisfy Jasper. Without these two things the contract intrepreation
does not even come into it.

Another lawyer quoted in the article is Thomas Carey, chairman of the business
practice group at Boston-based law firm Bromberg & Sunstein LLP, "said
that if it weren't for the seriousness of the matter, it might almost be
comical."

"I hereby sell you a rock. But I retain title to the rock. What kind of
sense does that make?" Carey said. "[The contract and Amendment 2]
should be an embarrassment to the attorneys who drew it up and to the
businessmen who negotiated it."

I can only guess here but I think Carey is not up to speed on the ownership
issue of the Unix code. Much of the original Unix code was owned by Berkely but
donated to the publci domain so AT&T owned very little of it - at least at
the time of the lawsuit. The settlement was sealed which made it very difficult
to negociate contracts over use of the code.

--

MadScientist

[ Reply to This | # ]

Declaration by Todd M. Shaughnessy in Support of IBM's Opposition to SCO's "Renewed" Motion to C
Authored by: Anonymous on Sunday, October 02 2005 @ 11:52 AM EDT
Easy enough... file "bash_history" does not exists, IBM can return
zero files. The name of the file is ".bash_history"

[ Reply to This | # ]

rm .bash_history... Can they be serious?
Authored by: Anonymous on Sunday, October 02 2005 @ 01:33 PM EDT
I am really wondering how "skilled" one has to be to present such
stupidity at court with a straight face!

Bash Shell history actually rotates by default, typically at 500 lines. This
means that for a user that proficiently uses the command line the .bash_history
covers for only the last few days of work. Why? Because it's NOT its job to
provide an archive of all actions performed but rather to comfortably provide
recent commands so that the user doesn't have to type in again and again
sometimes quite complex syntax.

What they COULD complain about (given that the court provides permission), so as
to review *all* operations on the box is the "process accounting" file
that registers all processes initiated by which user on the system, the time of
initiation and the time of termination of such. Not that it is in any way
*related* to submitting code (what's the point of defining how often a user
fires up frozen-bubble while supposedly working??!!) but in their skewed world
it could provide eventual evidence of "foul play" in the process of
discovery. Of course, even if that WAS the intention of the IBMers, I would
expect them to be *minimally* competent in unix administration and
"trick" all logs and files accordingly without having to be so
desperately obvious about it by deleting them alltogether!

Anyway, as someone else already asked, how did they come up with the actual
remove command? Was it done through a non bash shell so as to be registered
elsewhere? Was the issuer of the command such a clumsy lad so as to not realize
that the command would eventually show up unless he took specific steps in
preventing it (touching a read-only stand-in file, "seding" it out,
whatever floats your boat...)? That I find hard to believe for an experienced
unix user. How many and which users did actually delete their bash history with
that command? Perhaps only someone, even prior to the discovery handover (in
contrast to proccess accounting, bash_history keeps just the commands - not the
time of issuing), for whatever personal reasons? Perhaps only the
"root"? That would be understandable for security reasons and as any
unix user should well enough know (SCOundrels included), root is never used for
ordinary work like code submition or manipulation. Perhaps the remove history
command is implemented by default as a login action in the profile so that each
session starts afresh.

Or perhaps they were actually handed the proccess accounting file...

In other words there are lots of reasons why this should happen ordinarily and
actually *left* to be documented but there is NO logical reason to do it in
order to HIDE something.

BSF asking for IBM to produce some (unproduceable since deleted) .bash_history
files instead of the actual proccess accounting that, even if deleted on the
actual server, it is far more likely to be kept in archive in remote location
for security reasons, can only mean one of the following. Either the SCOundrels
are [pretending to be] extremely stupid and incompetent in regards to their own
*core* business or the actual server was left to the devices of a poor secretary
instead of a field expert to keep expences down since the payment has already
reached the cap.

[ Reply to This | # ]

Appeal further discovery?
Authored by: Anonymous on Sunday, October 02 2005 @ 02:22 PM EDT
Can't IBM appeal any additional discovery? This charade has gone on long enough
and Judge Wells is dancing on the edge of being party to fraud.

It's over, get on with it.

[ Reply to This | # ]

What I would like to see
Authored by: jbb on Sunday, October 02 2005 @ 03:14 PM EDT
One of the reasons Judge Wells gave for giving SCO so much discovery of IBM's code was that she wanted to preclude any possibility of SCO whining about needing any more discovery. It looks like that worked out about as well as dousing flames with gasoline.

I think it is now time for Judge Wells to tell SCO that "enough is enough". I would like to see her deny any further SCO discovery requests until SCO starts coughing up some of the discovery that IBM has requested. In particular they really should be forced to produce some credible evidence that IBM has done something wrong.

---
Anyone who has the power to make you believe absurdities has the power to make you commit injustices.

[ Reply to This | # ]

CVS is not done by root, or supervisers
Authored by: Chris Lingard on Sunday, October 02 2005 @ 04:04 PM EDT

rm bash_history. This command removes the history of past events. Such history is useful for repeating past commands. We request that you promptly produce all shell history resulting from your preparation of the CMVC/AIX Production so that we may identify more precisely the acts taken to prepare the CMVC database for production. This request includes the bash_history for all root users as well as all administrators.

They have got this completely wrong. The person responsible for maintaining the cvs records would have an extra account; probably cvsuser. You change user and check code in. Before this, the administrator and the programmer would have signed this work off as satisfactory, You then change to cvsuser and check in the code, with the required comments is the check in field.

It would be stupid to use root account for this; you use root for data backup; account administration, and general administration needing that priviledge.

The cyclic .bash_history would just show the last 500, or whatever, commands typed by that use. The root account used a cut down bourne shell, that might not have history; remember we are talking ancient history, and that fancy shells such as bash, Korn and tcsh were not invented then.

[ Reply to This | # ]

This is the point
Authored by: rsteinmetz70112 on Sunday, October 02 2005 @ 04:16 PM EDT
At the end of Exhibit 3 BSF reveals their intentions. They say;
As I am sure you appreciate, IBM's complete production of all of the AIX-, CMVC-, and Linux-related material that SCO has requested and that the Court has repeatedly ordered IBM to produce is a prerequisite to SCO's compliance with the Court's revised scheduling order.
BSF is saying they need not disclose any of the infringing code, until they are satisfied that IBM has given them everything they think they need.

If they were to disclose even one credible instance of alleged copying they would be in better shape. Unfortunately for SCOG, IBM has plenty of money and appears not to be willing to allow BSF or SCOG to blackmail, extort or intimidatie them.

Hopefully the judge will catch on soon.

---
Rsteinmetz - IANAL therefore my opinions are illegal.

"I could be wrong now, but I don't think so."
Randy Newman - The Title Theme from Monk

[ Reply to This | # ]

Declaration by Todd M. Shaughnessy in Support of IBM's Opposition to SCO's "Renewed" Motion to Compel, as text
Authored by: timkb4cq on Sunday, October 02 2005 @ 05:11 PM EDT
I think the term you're looking for is Agnostic.

[ Reply to This | # ]

Let's cut to the chase, shall we?
Authored by: chaz_paw on Sunday, October 02 2005 @ 07:33 PM EDT
"As I am sure you appreciate, IBM's complete production of
all of the AIX-, CMVC-, and Linux-related material that SCO has requested and
that the Court has repeatedly ordered IBM to produce is a prerequisite to SCO's
compliance with the Court's revised scheduling order."

---
Proud SuSE user since 07/26/04

Charles

[ Reply to This | # ]

Follow the pea, people, and you too can be a wiener like TSOG!
Authored by: Anonymous on Sunday, October 02 2005 @ 07:40 PM EDT
<p>
TSOG asks for "A" from IBM and the judge upholds the request; IBM
delivers
"A" is a useable format; TSOG complains bitterly that IBM did not
deliver "B";
and TSOG goes back to the judge to get "B". Does the judge order IBM
to
deliver "B" and why?
<p>
This is a simple con on TSOG's part, just like the rocket scientists and
truckloads of infringing code. It irks me that people get so confused and
worried.
<p>
No one in their right mind is going to deliver the command shell history when
they are ordered to deliver the source management system, as they are totally
unrelated. TSOG might as well have complained IBM did not deliver the latest
version of the operating system or biggest computer. (Maybe TSOG will next.)

[ Reply to This | # ]

Removal of shell history not normal
Authored by: gdt on Sunday, October 02 2005 @ 09:31 PM EDT

It's *normal* to remove what IBM removed.

Actually, it is not normal to remove the shell history. Using "normal" in the sense that it is the common practice. However, it is reasonable to remove the shell history. Using "reasonable" in the sense of "acceptable" or "not an unreasonable practice".

However, all of this misses the point. It is irrelevant whether the shell history exists or not. The deliverable discovery is the contents of the CMVC database.

Perhaps IBM were too clever by half in delivering a running system rather than CDs. There is established legal procedure for the production of documents on CD. There is not an established producure for delivery of a running database. So it is reasonable for SCOG to explore the process of the production of the database. However, a letter requesting a declaration would be the usual device, not sulking about checking for shell histories (which are likely to show the database was simply copied from another machine).

I suspect that IBM tried to avoid the problem that there is no procedure for the delivery of a configuration control database on CD. Something SCOG could make hay with, in terms of stating that the format was not acceptable. At least in delivering the database they can rely on declarations from SCOG personnel that they were familiar with the operation of CMVC.

[ Reply to This | # ]

Please don't light your torches
Authored by: tangomike on Sunday, October 02 2005 @ 09:55 PM EDT
I've been watching this since June 2003.

I do have to say that this is a clever move by BS&F. Apparently they have
found some techies willing to be Judas for them. It's unlikely that Judge Wells
would have any inkling about bash history. BS&F have done a nice job of
making it sound like IBM have removed some court-ordered info. I doubt the court
had any thought about including this in the order. Still, given some skill by a
lawyer, this COULD look bad for IBM and open another delay.

For everyone who is about to compose some rude epistle about the gormless judge,
lets just take stock. How many of your non-techy friends would have a clue about
bash history. In addition, just take a look at the discussion about bash history
and logs above.

Now... lets let IBM and their legal team do what they've shown they can do well:
take TSCOG+BS&F apart carefully and thoroughly.

---
If Bill Gates had a nickel for every time Windows crashed...
Oh wait! He does!


[ Reply to This | # ]

Senseless/impossible request for history files
Authored by: Anonymous on Sunday, October 02 2005 @ 10:06 PM EDT
Their request for history files is senseless/impossible to fulfil for the
following reasons:

#1 The moment you remove the history of past commands via
rm, it is gone for good. It won't appear in any backup. - This includes the rm
command itself, so you won't know if/when it has been done. -
#2 The information
in history files is quite short-lived and be expected to provide a complete log
of everything the user did. It is more of a convenience feature to be able to
see and repeat the last couple commands.
#3 Any user (including root) is able to
remove his personal command history at any time for any reason. Nobody can
expect to have the complete sequence of commands of an user by looking at the
.history files that existed at the times the backups have been run.
#4 As
mentioned, bash history is for Linux users only. This is known to any Unix
literate person and puts a spotlight on how competent SCOs lawyers are in making
their requests.

[ Reply to This | # ]

2080
Authored by: Hargoth on Monday, October 03 2005 @ 12:47 AM EDT
Annual saleries are generally calculated on 2080 hours which is 260 days
worked.

52 weeks * 5 days.

Holidays, vacation, sick leave, etc. are all factored into base salaries for a
total of 260 days 'paid' to work.

So use 2080 in calculations of yearly salaries.

This means that if you are paid $100,000.00 annually, you are worth $48.00 per
hour.

[ Reply to This | # ]

Another delay theory
Authored by: Khym Chanur on Monday, October 03 2005 @ 12:58 AM EDT
Maybe, when IBM says "those files are gone forever, we can't get them
back", SCO will demand that the do it all over again, not deleting any
files whatsoever. And if they actually get that, then they can throw out any
analysis they've already done on the database and start all over again, and ask
for an extension due to that.

---
Give a man a match, and he'll be warm for a minute, but set him on fire, and
he'll be warm for the rest of his life. (Paraphrased from Terry Pratchett)

[ Reply to This | # ]

y2k problem at IBM :)
Authored by: Anonymous on Monday, October 03 2005 @ 03:35 AM EDT
Look at the log entries starting with the line:
$ rlog base_callback.c,v

[ Reply to This | # ]

I think you misunderstand Boies' Job
Authored by: Anonymous on Monday, October 03 2005 @ 04:44 AM EDT
In my opinion, Boies is not paid for winning the case. He is paid to drag it
out as plausibly as possible, for two reasons:

a) the real game has been happening in the stock market,

b) there was never a chance in hell for SCO to succeed. The more dust collects
over the machinations of its current leaders, the better. The ultimate goal is
to have SCO believably dismantled and the evidence and witnesses dispersed as
widely as possible.

[ Reply to This | # ]

  • Yep - Authored by: Anonymous on Monday, October 03 2005 @ 04:29 PM EDT
Why expect a history log?
Authored by: Anonymous on Monday, October 03 2005 @ 05:58 AM EDT
Surely the CMVC server was provided by IBM only as a way of allowing SCO (via
their trusted 3rd party) to dig around the AIX files without keep coming back
with silly questions. It was never intended to be a mirror of the real CMVC
server. Thus it would only be expected to contain the files stipulated by the
judge, plus enough software to make the whole thing go.

Presumably all the preparation work would have been done on another machine and
then the relevant files copied to a clean machine to ship to SCO. IBM would be
very careful to ensure that SCO are not given anything containing deleted data
as the third party may well use forensic methods to recover it. Why should the
server contain anything in a history log except a few test logins to make sure
all is working?

Alan(UK)

[ Reply to This | # ]

The '.bash_history' file(s)...
Authored by: Groklaw Lurker on Monday, October 03 2005 @ 11:17 AM EDT
"..."bash_history" is a history of all the commands -- not just
the CMVC commands -- typed by the operator of the machine. Thus it could easily
contain sensitive information about internal IBM account names, machine names,
etc. IBM almost certainly will have a *policy* to delete such histories from
*any* machine leaving the company..."

I long ago wrote a daemon that is launched on startup and runs quietly in the
background that monitors for .bash_history files of greater than 0 bytes in our
administrator home directories (and /root of course). This daemon simply
truncates the .bash_history file to 0 bytes the instant it contains any data.

Having a history buffer is useful and, from time to time, it can be useful to
have it written out, but for the most part, the .bash_history file is anathema
to system security when it is active on administrator accounts. System
administrators being human, from time to time, for one reason or another, a
.bash_history file is written to an administrator's home directory (or /root) on
logout and in these cases my history monitoring daemon instantly cleans up the
mess and notifies the administrators. We simply don't retain .bash_history files
on any of our administrator accounts and we couldn't produce them to respond to
a court order if we had to - they don't exist. *Shrug*



---
(GL) Groklaw Lurker
End the tyranny, abolish software patents.

[ Reply to This | # ]

Require Same Info from SCO, BSF
Authored by: Anonymous on Monday, October 03 2005 @ 01:57 PM EDT
How about if the court requires transcripts from keystroke loggers installed at
BSF and SCO? If they don't have them installed, maybe the court could mandate
their installation, so we can see the equivalent of what they want to see from
IBM. They basically want a record of all commands ever typed, etc. That is
almost the same thing as a keystroke logger. Who wouldn't want that info about
their opponents, to know what they were thinking, exactly what their strategy
is, etc.

There probably is a lot of good information on the BSF and SCO computers also,
even if it has been 'deleted'. Much of it pertaining closely to this case.

[ Reply to This | # ]

Cost an Issue?
Authored by: Anonymous on Monday, October 03 2005 @ 03:09 PM EDT
You bet, and SCO knew exactly what those costs would be and wanted to drive them
up as high and as fast as they could. Why? So that IBM would decide to buy out
SCO rather than take them on in court.

The problem is that IBM didn't bite, now SCO is just trying to keep that price
going up and up and up in the hopes that eventually IBM will say
"uncle".

But, I don't think that will happen now. So Darl's only purpose in life right
now is to inflict pain (in the way of costs) on IBM. So I'm sure Darl grins
from ear to ear every time the court grants more discovery because that is the
only kind of victory that it is possible for him to win.

[ Reply to This | # ]

That dog ain't gonna hunt...
Authored by: Anonymous on Monday, October 03 2005 @ 03:12 PM EDT
So, my question is: "When does SCO have to return the IBM machine that IBM
provided?"

Because I would be willing to bet that SCO will remove any history of commands
that they have entered. How is it that IBM is going to be able to make sure
that SCO is not in trying to steal AIX secrets? So, if they get the machine
back and there are no command history files, could they then complain?

[ Reply to This | # ]

Removing .bash_history
Authored by: Anonymous on Monday, October 03 2005 @ 03:21 PM EDT
I know I am not the only one who thought of this, but all you have to do is
launch another shell like ksh, then run the command
">.bash_history". The greater than symbol ">" zeroes
out whatever file you give it. Doing this would leave no record that you did it
in .bash_history, but would leave it in .sh_history (the ksh history file). I
know that I would remove any history files before turning a server over to
someone else, just like I make sure to take my atm receipts and destroy them
before walking away.

aaron_tx (not logged in)

[ Reply to This | # ]

So much material...
Authored by: Anonymous on Monday, October 03 2005 @ 05:03 PM EDT
...so few comments.

How can we sum it all up?

for IBM:

Please identify, with specificity (by file and line of code), (a) all source code and other material in Linux (including but not limited to the Linux kernel, any Linux operating system and any Linux distribution) to which plaintiff has rights; and (b) the nature of plaintiff's rights, including but not limited to whether and how the code or other material derives from UNIX.

INTERROGATORY NO. 12

for SCO:

15 The horseleach hath two daughters, crying, Give, give. There are three things that are never satisfied, yea, four things say not, It is enough:

16 The grave; and the barren womb; the earth that is not filled with water; and the fire that saith not, It is enough.

Proverbs 30 (King James Version)

Alan(UK)

[ Reply to This | # ]

Bash History
Authored by: Anonymous on Tuesday, October 04 2005 @ 04:42 AM EDT
Can't resist:

echo "SCO you are going to lose"
echo "Oh yeah"
echo "SCO you are going to lose"
echo "Oh yeah"
echo "SCO you are going to lose"
echo "Oh yeah"
...

[ Reply to This | # ]

  • Bash History - Authored by: Anonymous on Tuesday, October 04 2005 @ 05:34 AM EDT
Groklaw © Copyright 2003-2013 Pamela Jones.
All trademarks and copyrights on this page are owned by their respective owners.
Comments are owned by the individual posters.

PJ's articles are licensed under a Creative Commons License. ( Details )