OpenWrt One vs. EU Cyber Resilience Act

Gregers Baur-Petersen glp at openwrt.org
Sat Jan 20 03:50:59 PST 2024


I did look into the EU CRA from the commercial entity point-of-view. 
SBOM documentation and continued product monitoring for vulnerabilities 
and hazards to people are central + effective incident response 
(including; how to pull a product of the market if needed).

In regard to OpenWrt One; it would perhaps be enough if it was/is 
classified as a not-for-profit device ...?

On 19/01/2024 21.18, Hauke Mehrtens wrote:
> The EU is working on a EU Cyber Resilience Act to improve the software 
> security of (consumer) software and (consumer) hardware which contains 
> software. This should be similar to the CE sign, but for software.
> https://en.wikipedia.org/wiki/Cyber_Resilience_Act
> 
> After the successful lobbying of multiple open source organizations non 
> commercial open source software developer would be exempt from this 
> regulation. As far as I understood the OpenWrt project would not be 
> affected by this regulation, but if a vendor uses OpenWrt on a router, 
> this vendor has to make sure that his product including OpenWrt is 
> compliant when selling onto the EU market. With the OpenWrt One we or 
> Banana Pi could also get required to take care of this regulation.
> 
> Did someone look into the requirements needed to make OpenWrt compliant 
> to the EU Cyber Resilience Act for a commercial entity?
> 
> Did someone look into this regulation with the OpenWrt One project in mind?
> 
> I support the general idea of the EU to improve the security of 
> software. I think the current draft is much better regarding open source 
> than the first versions.
> 
> Hauke
> 
> _______________________________________________
> openwrt-devel mailing list
> openwrt-devel at lists.openwrt.org
> https://lists.openwrt.org/mailman/listinfo/openwrt-devel

-- 
  -----------------------------------------------------
  Gregers Baur-Petersen
  Anthropologist
  Information security consultant

   _______                     ________        __
  |       |.-----.-----.-----.|  |  |  |.----.|  |_
  |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
  |_______||   __|_____|__|__||________||__|  |____|
           |__| W I R E L E S S   F R E E D O M
  -----------------------------------------------------
  OpenWrt 19.07.2, r10947-65030d81f3
  -----------------------------------------------------



More information about the openwrt-devel mailing list