From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id C2F0C158041 for ; Tue, 2 Apr 2024 13:13:17 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 1E7B5E2AB1; Tue, 2 Apr 2024 13:13:11 +0000 (UTC) Received: from EUR01-VE1-obe.outbound.protection.outlook.com (mail-ve1eur01on2132.outbound.protection.outlook.com [40.107.14.132]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 702F4E2A9D for ; Tue, 2 Apr 2024 13:13:10 +0000 (UTC) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=jmSx9q6QiozONgT2hliazuTmYtrD+pFWEY40JOxxbdFMdgMiyJiS4eBxlycXgQyO0aVj75FYNKuk/tyTiDtZ+7MqQ+I37pFwh+Xn0uQxMD+O8vw5gmmMLd6IQWQhNRAspxc6PlfeSqjeTF+E2OvtRAn36rWNJ6KbMvLuYsM0NmDDyMznwyyvqGj/65oFhtz4gzXMD+AfZszNI3P+Oa9e/GRM/rXaCcDAkRia5qpogXe/SyfHxgPARuY2+KSGq1J0YhxVk9aQ3V4ACai07IGp1OWjm4nUFLYSQMAktViY/SSob4rJc5JDQ5uU+Ki3EjW6wD3DAfQlCcArWE1iNsr9xQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=LTvDOivzclEr9vBEhv+hxQ4tbX5SKbk7BmERKdwB6so=; b=e1fgMP47qUL8F93nt7YvNOVemXSgr662dYaXXe9YnuteF5a+cPljmP688fcf5jUMi0VchcIDlYPJ/Qp51GeD0mP+t0CyfZEYYLaaFizkdQMyVoAXIwpQJDcZKY+CO9qWeur+VwDN+TyOfEvf3OhWFFIZvtdieJpdqjZgPZLby4N1LplGJUxLc/0x4LPzu+cGQCol8hGWupX9Y5xu3pGuYk+VFRDKlycsH+syvSslNDDMQZACySNOIdJAdRMctMveE7rnsQCFD8u3K6if2CHJKgRc4JEyDvPj6wXjykCSlLAZSjq/QDPVNE/6/vjKzeCyBuKPq/SmYZZIVfvHCMD4wQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=neox.de; dmarc=pass action=none header.from=neox.de; dkim=pass header.d=neox.de; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=neoxag.onmicrosoft.com; s=selector2-neoxag-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=LTvDOivzclEr9vBEhv+hxQ4tbX5SKbk7BmERKdwB6so=; b=KIpwGSnJp5vjjM3FAv8dLJFOG7srgP7Wc8leAnyduSJsjytDHF7IxCtWVgI4wcCJUUVSBBb3xGy3T5D/7bONY2VYaHnb/8ZZZrKFG+lz+KEx291jMdr1WwAXLE/FL2d236NO+4z0Iz6HxS4hroUnx0ZV5pOSwD3b0ZUgFXchALM= Received: from DB9PR04MB9676.eurprd04.prod.outlook.com (2603:10a6:10:308::13) by AS8PR04MB7942.eurprd04.prod.outlook.com (2603:10a6:20b:2a9::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.42; Tue, 2 Apr 2024 13:13:04 +0000 Received: from DB9PR04MB9676.eurprd04.prod.outlook.com ([fe80::2679:cc11:ba37:59dc]) by DB9PR04MB9676.eurprd04.prod.outlook.com ([fe80::2679:cc11:ba37:59dc%3]) with mapi id 15.20.7409.042; Tue, 2 Apr 2024 13:13:03 +0000 From: Andreas Marx To: "gentoo-user@lists.gentoo.org" Subject: [gentoo-user] xz-backdoor followup / restrict high entropy files in ebuilds Thread-Topic: xz-backdoor followup / restrict high entropy files in ebuilds Thread-Index: AQHahP9+FeCFIJ+x7E+//2CTWq2pWg== Date: Tue, 2 Apr 2024 13:13:03 +0000 Message-ID: Accept-Language: de-DE, en-US Content-Language: de-DE X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-publictraffictype: Email x-ms-traffictypediagnostic: DB9PR04MB9676:EE_|AS8PR04MB7942:EE_ x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DB9PR04MB9676.eurprd04.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230031)(366007)(1800799015)(376005);DIR:OUT;SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?TUFGTjNtK1NBcTVDb2kxMUJyejlJL2FON0plVCttekNmdmNqRGdXNERKeDhO?= =?utf-8?B?WjdCd3N6QTR6WGw4OGpkcHhNOUFob0tsUTRvSGE2Y2pGN2k5UFNWY2orK1BP?= =?utf-8?B?RitxazFtYVpQSkU1NHZmc1pSMmtQRUhSVXFzbjYwQUdGL0NlVWNUVEEySGxa?= =?utf-8?B?RFRmRVMvelQrU3BJV2lFMDZQR1JlZmVtVWdUcWYwaVduRzNRbms3ZEJvTDhJ?= =?utf-8?B?cE1QMkp6UzZsRzFOTHk2Mmx0dWR1czVKS2NHZ0greDNuRkpNN1hLZUFmckxr?= =?utf-8?B?bEdaaXdybnpuaC92T1BxRjB6UjlrRFprMmhPTUFWelRwTnBsSHhZVFNKM094?= =?utf-8?B?WTBNcDh6LzhNd0wrU1lxR1JiNkNRYldMQkdQYldyN1ZEYVhTb283K0hOc1Nl?= =?utf-8?B?dC83OGk3ZkRmSnd4VHZNUk9zRTM2MjhFRGJNaXVwOThqdmZ1eS94QWZNbGpF?= =?utf-8?B?aEhzalkvMldlVElaeUUyOUVGWlY3V2k4NDMrOThLaGIrem9Sb0xRbnlHbXp0?= =?utf-8?B?dHdvTXRnNzUxWWxQcy9ySEN3U2pmNEhEa0loOW1iNXFsM2NnekZWaFVacUVR?= =?utf-8?B?OHRCNXlhQTA2M3dMNnpDbTJxSUVvL2xSZCtQOUNmZnN4bkl0TXhucTBGR1lI?= =?utf-8?B?YzZnOXE4cXV1WERyUjFGbjh6VVNDbWtPTFI2eDA2eG9VbmJFYUc1THNDR2R4?= =?utf-8?B?blBwU0FhV3YxV3EweVBUV2tJUEw3Z21iTEN4UlAzSkN5c1I3QmU3cm9JWjNH?= =?utf-8?B?SWpXeWVJOXcvdFp3UkIzRG1aczlvOS9QSnJRRVJzT3AweFdBYUttWnBXY0kw?= =?utf-8?B?QytlbkhiS1Y3SzNqdkdZVWxLSVZqRy9DZ2tzNDlkVzk5NERlUkhDcG9DWGtj?= =?utf-8?B?RVZSa2F6Q1Nna2tBNCtPeGNucWxPTnJ0T0lHbFJZdDFyV1ZKeE5sVmtiT1ZE?= =?utf-8?B?WmZ2ZlN1R3dtZVpwdUZtanJ1SjBQdGFTK0pvRHgwa3owTmhvaEI4b1ZwRXA4?= =?utf-8?B?UTRVcW5qd0dwUVVJMHpMRHY2d3dhNk9yRDZkcnNWMFJPNkhPNmN4WFZESGw5?= =?utf-8?B?a0hXcEJ1anlZTmpmUEQwTHgrYWlCK3FPOGJFRmZrZ015YmRBQU1ITEs2cmtI?= =?utf-8?B?TXBWaTc4ZWVKN1c0eUV5M0dSS3kzU2xlWXBVTkt4Q21yVzNwM3E1N2tpb1Vk?= =?utf-8?B?VWUvbDlFaytWUXRkWUxMUTM5K3ZiVlNtRjZHSm9EaC9SZmEwbVkvMFpXTEZH?= =?utf-8?B?Ym5HV2JKemFQUUx4TVRra3RENC9jei9FbnNIUU55OHlWM21pOFRyMHZUY3F6?= =?utf-8?B?K20vbjlVeElOS21ZUTIrdERBWlgyZHBkdlFFSDhPTFNkWThBYkxFYlBXSkNQ?= =?utf-8?B?RUZOVHNoS1RVUWtHUkdEeGNGeGY4M3R2d2pUTm5POGJtc1kwTkh2TENhLy9s?= =?utf-8?B?dmtTSzRhQTQwRDQrM2t6ZEdxWjNGTUVPZXdrSk1mR1Q2UE0rTnlReldiNnk1?= =?utf-8?B?dldPQ2padnhad0w1MEJpNmRKL1BycUtXRndUZExVbWprREtjQzgvM3p3NVJK?= =?utf-8?B?RG1WYUF5Uld0T0tLeGpUaENFZkN5TjFhYitaSjJNUmhYT3JXenpEOUJUdFRL?= =?utf-8?B?WjBmKzlkR3luYXplaXJEamlYMmpMTDZ5blRLcFhEWkNJUDN0SUJzYVNJK0Fa?= =?utf-8?B?SHJNakZLeEx2dk9OQUFyZ3ErQWZ0d1FzRTBtZ3Y4STZyNlJYTW94L0l4Zkp1?= =?utf-8?B?UnhuTnIxemhNUno3ck12amJzSnFQODZKYS9RRzhSam1UaW01M1VYbWxteUtO?= =?utf-8?B?NlNwc3dWUk9HUFlzbWJMT1piNm5mejRCTHNBdmZHTk9YdHpKZ1ZIQkJVclc2?= =?utf-8?B?WFRNTEN3QjNKRnVEMWtwcktBK054QjB2THVJdWhyV2hGaFA1cGNDb2c3NUgy?= =?utf-8?B?Y3pkSnZGditlb2RBeHpMZ05nVFZGZW1OWk43WUU3aWxXOVpwSzJhRDdqZXFM?= =?utf-8?B?RUZ2RTFrVVZ2WXhKVml1YVlQSWVBS09rV0pxZ3RuMW5EdjJ2cy9LRFl0Vzcy?= =?utf-8?B?R213UktMT25ZaUlMcjNYcGRQeDVVSGpBTEpFNEs5amJST25OMnYxZElBNnNv?= =?utf-8?Q?xCh0lyrAzJCx15OCCuV3ZDvHl?= Content-Type: text/plain; charset="utf-8" Content-ID: <9AF65A7138F0A44B8BCE90D3B62D4B00@neox.de> Content-Transfer-Encoding: base64 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 X-OriginatorOrg: neox.de X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DB9PR04MB9676.eurprd04.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: ec10f638-3f94-4331-b848-08dc5316a12d X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Apr 2024 13:13:03.8254 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 366860f9-54b4-4b09-b4bd-77a01e769c2a X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: uv/z2CaXblKgUWYTLQoQ0g5FKci+IX8APz2vwZgkX4FyuNUnngFAYIlzc2xOCxgSEpUEfyhRnhredEkTEmlheA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS8PR04MB7942 X-Archives-Salt: 9aa85e06-8ee2-434a-bb12-9563653144a0 X-Archives-Hash: 3673f70ca9a80ccde9f4c0b21d09e776 SGkgYWxsLA0KDQp0aGUgeHotYmFja2Rvb3IgKENWRS0yMDI0LTMwOTQpIGx1Y2tpbHkgZGlkIG5v dCB0YXJnZXQgZ2VudG9vLCBidXQgaXQgY291bGQgaGF2ZSBlYXNpbHkgZG9uZSBzby4gT25lIHN0 ZXAgaW4gdGhpcyBzb3BoaXN0aWNhdGVkIGF0dGFjayBpbnZvbHZlZCBpbmplY3RpbmcgY29uY2Vh bGVkIGNvZGUgaW50byB0aGUgYnVpbGQtcHJvY2VzcyBieSBzb21lIGtpbmQgb2YgaG9tZWJyZXcg c3RlZ2Fub2dyYXBoeS4NCg0KSSBhc2tlZCBteXNlbGYgaG93IG1hbnkgaGlnaC1lbnRyb3B5IGZp bGVzIEkgY2FuIGZpbmQgaW4gZGlzdGZpbGVzLiBBbGwgdGhlc2UgZ2lmfHBuZ3xqcGd8anBlZ3x3 YXZ8ZGVyfHh6fGd6fHAxMiBtaWdodCBhY3R1YWxseSBiZSBsb3cgZW50cm9weSwgYnV0IGNoZWNr aW5nIHRoaXMgd291bGQgcmVxdWlyZSBhIG1vcmUgc29waGlzdGljYXRlZCBhcHByb2FjaCDigJQg aW4gYSBuYWl2ZSBhcHByb2FjaCwgSSBqdXN0IGNoZWNrZWQgaG93IG11Y2ggYnppcDIgaXMgYWJs ZSB0byBjb21wcmVzcyBmaWxlcy4NCg0KQnV0IEkgYWxzbyBmb3VuZCBzb21lIHJlYWxseSB1bm5l Y2Vzc2FyeSBhbmQg4oCUIElNSE8g4oCUIGhpZ2ggcmlzayBzdHVmZiBpbiBkaXN0ZmlsZXMuIHRw bS10b29scyBmLmUuIGhhcyB0aGUgLy5naXQvIHN1YmRpciB3aXRoIGFsbCB0aG9zZSBibG9icy4g UHl0aG9uIGhhcyBzb21lIGF1ZGlvLXRlc3RmaWxlcy4NCg0KSW4gYW4gaWRlYWwgd29ybGQsIHVw c3RyZWFtIHdvdWxkIGluc3RlYWQgaW5jbHVkZSBzb21lIGxvdyBlbnRyb3B5IGdlbmVyYXRvcnMg Zm9yIHRoaXMgc3R1ZmYuIEdlbnRvbyBzaG91bGQgYWRkcmVzcyB0aGUgcHJvYmxlbSBldmVuIGlm IHVwc3RyZWFtIGlzIG5vdCByZXNwb25zaXZlLiANCg0KSSB3b25kZXIgaWYgd2Ugc2hvdWxkIGhh dmUgc29tZSBmdW5jdGlvbmFsaXR5IGluIGVjbGFzc2VzIHRvDQphKSBsZXQgc3JjX3VucGFjaygp IGZpbHRlci9kcm9wIGRpc3RmaWxlIGNvbnRlbnQsIGNvbnRyb2xsZWQgYnkgYW4gZWJ1aWxkLXZh cmlhYmxlICh0byBkZWFsIGYuZS4gd2l0aCAvLmdpdC8pDQpiKSBsZXQgc3JjX3VucGFjaygpIHdh cm4gb24gaGlnaCBlbnRyb3B5IGNvbnRlbnQgKGV4Y2VwdCBmaWxlcyB3aGl0ZWxpc3RlZCBpbiBl YnVpbGQpDQpUaGlzIHdvdWxkIGF0IGxlYXN0IGFsbG93IHRvIGVhc2lseSBpZGVudGlmeSBoaWdo IHJpc2sgc3R1ZmYgdGhhdCB3YXJyYW50cyBtb3JlIHNjcnV0aW55Lg0KDQogIA0KR3JlZXRzLA0K QW5kcmVhcw0KDQpCVFcsIHRoaXMgaXMgbXkgbmFpdmUgdGVzdCBzY3JpcHQsIHNvcnQgb3V0cHV0 IG9uIC1yIC1rMw0KDQojIS9iaW4vYmFzaA0KDQpUTVBESVI9L3RtcC9kaXN0ZmlsZXMtZW50cm9w eS4kKGRhdGUgKyIlWSVtJWQlSCVNJVMiKQ0KdHJhcCAnIHJtIC1yZiAke1RNUERJUn0gJyBFWElU DQpta2RpciAke1RNUERJUn0NCmNkICR7VE1QRElSfQ0KDQpmb3IgRElTVEZJTEUgaW4gJChmaW5k IC92YXIvY2FjaGUvZGlzdGZpbGVzLyAtdHlwZSBmIC1wcmludGYgJyVmXG4nKQ0KZG8NCglta2Rp ciAke0RJU1RGSUxFfQ0KCWNhc2UgJHtESVNURklMRX0gaW4NCgkJKi50YXIuZ3opCWd6aXAgLWRj IC92YXIvY2FjaGUvZGlzdGZpbGVzLyR7RElTVEZJTEV9IHwgdGFyIC1DICR7VE1QRElSfS8ke0RJ U1RGSUxFfSAteGYgLTs7DQoJCSoudGd6KQkJZ3ppcCAtZGMgL3Zhci9jYWNoZS9kaXN0ZmlsZXMv JHtESVNURklMRX0gfCB0YXIgLUMgJHtUTVBESVJ9LyR7RElTVEZJTEV9IC14ZiAtOzsNCgkJKi50 YXIueHopCXh6Y2F0ICAgIC92YXIvY2FjaGUvZGlzdGZpbGVzLyR7RElTVEZJTEV9IHwgdGFyIC1D ICR7VE1QRElSfS8ke0RJU1RGSUxFfSAteGYgLTs7DQoJCSoudHh6KQkJeHpjYXQgICAgL3Zhci9j YWNoZS9kaXN0ZmlsZXMvJHtESVNURklMRX0gfCB0YXIgLUMgJHtUTVBESVJ9LyR7RElTVEZJTEV9 IC14ZiAtOzsNCgkJKi50YXIuYnoyKQliemNhdCAgICAvdmFyL2NhY2hlL2Rpc3RmaWxlcy8ke0RJ U1RGSUxFfSB8IHRhciAtQyAke1RNUERJUn0vJHtESVNURklMRX0gLXhmIC07Ow0KCQkqLnRieikJ CWJ6Y2F0ICAgIC92YXIvY2FjaGUvZGlzdGZpbGVzLyR7RElTVEZJTEV9IHwgdGFyIC1DICR7VE1Q RElSfS8ke0RJU1RGSUxFfSAteGYgLTs7DQoJCSouZ3opCQlnemlwIC1kYyAvdmFyL2NhY2hlL2Rp c3RmaWxlcy8ke0RJU1RGSUxFfSA+ICAgICAgICAke1RNUERJUn0vJHtESVNURklMRX0vZmlsZTs7 DQoJCSopCQljYXQgICAgICAvdmFyL2NhY2hlL2Rpc3RmaWxlcy8ke0RJU1RGSUxFfSA+ICAgICAg ICAke1RNUERJUn0vJHtESVNURklMRX0vZmlsZTs7DQoJZXNhYw0KCWZpbmQgJHtESVNURklMRX0g LXR5cGUgZiB8IHhhcmdzIGJ6aXAyIC1jdiAyPiYxID4vZGV2L251bGwNCglybSAtcmYgJHtUTVBE SVJ9LyR7RElTVEZJTEV9DQpkb25lDQoNCg==