From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id D9BAD158041 for ; Sun, 7 Apr 2024 13:07:13 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id E850FE2A90; Sun, 7 Apr 2024 13:07:09 +0000 (UTC) Received: from smtp.gentoo.org (woodpecker.gentoo.org [IPv6:2001:470:ea4a:1:5054:ff:fec7:86e4]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id A3446E2A8D for ; Sun, 7 Apr 2024 13:07:09 +0000 (UTC) From: "Andreas K. Huettel" To: gentoo-dev@lists.gentoo.org Cc: Michael Orlitzky Subject: Re: [gentoo-dev] Update on the 23.0 profiles Date: Sun, 07 Apr 2024 15:07:01 +0200 Message-ID: <5458013.Sb9uPGUboI@pinacolada> Organization: Gentoo Linux In-Reply-To: References: <10606960.T7Z3S40VBb@noumea> <114170429.nniJfEyVGO@pinacolada> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart1974857.yKVeVyVuyW"; micalg="pgp-sha512"; protocol="application/pgp-signature" X-Archives-Salt: 7fcd21d8-57c3-4a17-a996-bf0bc8d11b14 X-Archives-Hash: a050f20f67bbf39a767365588150cef8 --nextPart1974857.yKVeVyVuyW Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="iso-8859-1"; protected-headers="v1" From: "Andreas K. Huettel" To: gentoo-dev@lists.gentoo.org Cc: Michael Orlitzky Subject: Re: [gentoo-dev] Update on the 23.0 profiles Date: Sun, 07 Apr 2024 15:07:01 +0200 Message-ID: <5458013.Sb9uPGUboI@pinacolada> Organization: Gentoo Linux MIME-Version: 1.0 Am Sonntag, 7. April 2024, 14:51:55 CEST schrieb Michael Orlitzky: > On Sun, 2024-04-07 at 14:35 +0200, Andreas K. Huettel wrote: > >=20 > > Uhh, I dont really remember, I think some Chinese-sounding guy asked > > me for it... (j/k)=20 >=20 > It is remarkably bad timing. How it looks: Gentoo's response to the xz > incident is to have me rebuild my entire system with everything that > could possibly be linked to liblzma, linked to liblzma. Even on the > hardened profiles, and with no easy way to prevent it. Well, we're now working with the best-audited compression library ever,=20 I guess. > tl;dr can we turn them back off in the profile? In any scenario where > they are beneficial, there's a better place to put them. Easily doable with lzma, if there is consensus for it. Slightly more complex for zstd since this affects gcc and binutils. Still doable though. =2D-=20 Andreas K. H=FCttel dilfridge@gentoo.org Gentoo Linux developer (council, toolchain, base-system, perl, libreoffice) --nextPart1974857.yKVeVyVuyW Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part. Content-Transfer-Encoding: 7Bit -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQKTBAABCgB9FiEE/Rnm0xsZLuTcY+rT3CsWIV7VQSoFAmYSmnVfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEZE MTlFNkQzMUIxOTJFRTREQzYzRUFEM0RDMkIxNjIxNUVENTQxMkEACgkQ3CsWIV7V QSoq5RAAgiYsTlS/uKtet6e9Fu7Y+wYvHpAuyqfYZfQhYR4KkBssHy6HuUl/m5DO pxljPYZJFRZ9CeMHQsrDNRVAQSUEQUbfCwtZJ+b5RDBPZZUMxeE8phTmg2u8LAKr o6EbGIUYIpN2+WPJ/IX0QYIOQv5H5ToX6fJAnoo+V27PUhyZxkmTgluropJT8O55 wcCai9i/3q2AHxiFQ79w35KsDeTNE3LLeHXQnFJiHrK2Bcn/+Yo0rv9/DuOQBzEM 8Pj4zOSX37a3uktPF/mFzHzQitQEe3xZRirVows3M3EPSgKaUAiOxxI90hhsP/l5 0eXHZ8irwnJJ7N12wOV1N0NT1Md5+g4OF7/YJTMyis5U0pT09D7SLrTa1uZplvSw DqMIZ6efAg1/9pBgdqJQw3NWVoH2tDp05x0slNYH1Vf2qhGTYPzB12NLu0/hb4ox 4moRoog4z7DvjFWubTOqQw+9hLrdI+LcaaBcfDOLe9tOpNzHRKPhtizTPv+Ke2/M ev2RMVRC/Bb1Svbfv3CX7DHSVBT3umwZmR9q3Gm4dcku9W0GYWs7eG0+/gPCnHga 3dP9acfJS/mlEcvf4alUvulx8joLZLNVgr9lDmakly4r8qRo6y1EyDIS7lGhW2W9 9k6duH+0/SMH3O5N2EmG54+KDpNSM8ngSuIQSjFAqVIFKAk953c= =x4UY -----END PGP SIGNATURE----- --nextPart1974857.yKVeVyVuyW--