Am Sonntag, 7. April 2024, 14:51:55 CEST schrieb Michael Orlitzky: > On Sun, 2024-04-07 at 14:35 +0200, Andreas K. Huettel wrote: > > > > Uhh, I dont really remember, I think some Chinese-sounding guy asked > > me for it... (j/k) > > It is remarkably bad timing. How it looks: Gentoo's response to the xz > incident is to have me rebuild my entire system with everything that > could possibly be linked to liblzma, linked to liblzma. Even on the > hardened profiles, and with no easy way to prevent it.
Well, we're now working with the best-audited compression library ever, I guess. > tl;dr can we turn them back off in the profile? In any scenario where > they are beneficial, there's a better place to put them. Easily doable with lzma, if there is consensus for it. Slightly more complex for zstd since this affects gcc and binutils. Still doable though. -- Andreas K. Hüttel dilfri...@gentoo.org Gentoo Linux developer (council, toolchain, base-system, perl, libreoffice)
signature.asc
Description: This is a digitally signed message part.
