Re: [gentoo-dev] Current unavoidable use of xz utils in Gentoo

2024-04-02 Thread Eddie Chapman
On 02/04/2024 20:46, Eli Schwartz wrote: On 4/2/24 4:43 AM, Eddie Chapman wrote: Well, they change one thing. It's hard for the security professionals at work to deal with things when they are constantly having to respond to the three-ring circus. This is a complaint I hear very often from

Re: [gentoo-dev] Current unavoidable use of xz utils in Gentoo

2024-04-02 Thread Eli Schwartz
On 4/2/24 4:43 AM, Eddie Chapman wrote: >> Well, they change one thing. It's hard for the security professionals at >> work to deal with things when they are constantly having to respond to the >> three-ring circus. > > This is a complaint I hear very often from the people working at the heart >

Re: [gentoo-dev] Current unavoidable use of xz utils in Gentoo

2024-04-02 Thread Eddie Chapman
On 01/04/2024 15:56, Azamat Hackimov wrote: There is no problem in the XZ/LZMA format itself as the reference algorithm is not compromised. It's all about trust between developers of application and developers of distribution. If you lost trust to xz-utils's developers, you may use alternatives

Re: [gentoo-dev] [PATCH 2/2] texlive-module.eclass: add texlive-module_update_tlpdb

2024-04-02 Thread Ulrich Mueller
> On Tue, 02 Apr 2024, Florian Schmaus wrote: > + # If we are updating this package, then there is no need to update > + # the tlpdb in postrm, as it will be again updated in postinst. > + [[ -n ${REPLACING_VERSIONS} && ${EBUILD_PHASE} == postrm ]] && return Sorry for having

[gentoo-dev] [PATCH 2/2] texlive-module.eclass: add texlive-module_update_tlpdb

2024-04-02 Thread Florian Schmaus
Update (or create) the tlpdb based on the contents of /usr/share/tlpkg/tlpobj. Closes: https://bugs.gentoo.org/928162 Signed-off-by: Florian Schmaus --- eclass/texlive-module.eclass | 57 1 file changed, 57 insertions(+) diff --git

[gentoo-dev] [PATCH 1/2] texlive-module.eclass: only invoke etexmf-update in postinst if not replacing versions

2024-04-02 Thread Florian Schmaus
Signed-off-by: Florian Schmaus --- eclass/texlive-module.eclass | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/eclass/texlive-module.eclass b/eclass/texlive-module.eclass index 9fc4e619ff9b..d19e02f02647 100644 --- a/eclass/texlive-module.eclass +++

Re: [gentoo-dev] Current unavoidable use of xz utils in Gentoo

2024-04-02 Thread Eddie Chapman
Michał Górny wrote: > On Mon, 2024-04-01 at 08:57 +0100, Eddie Chapman wrote: > >> I stand by and reiterate my view that there is far too much of a >> cavalier attitude towards the matter in general out there including here >> in Gentoo. But not in particular here, it is everywhere where this is

Re: [gentoo-dev] Current unavoidable use of xz utils in Gentoo

2024-04-02 Thread Eddie Chapman
OK, I said I was done and this is a waste of time for everyone, but if people want to keep the discussion going I'll bite :-) Eli Schwartz wrote: > But also, please keep in mind that 98% of all people on the internet can > do whatever they want and it simply doesn't matter. They are public >

Re: [gentoo-dev] Current unavoidable use of xz utils in Gentoo

2024-04-02 Thread Joonas Niilola
On 1.4.2024 23.07, James Le Cuirot wrote: > > That's not stupid at all, I'd been thinking exactly the same thing. I raised > this whole issue during a discussion at FOSDEM 2019, where I admitted that I > didn't check the code changes for packages I was bumping, knowing that few to > none of the