[MacPorts] #52000: Add xz to "base" to allow changing the default compression format to .tar.xz in the future
MacPorts
noreply at macports.org
Sun Aug 4 08:56:13 UTC 2024
#52000: Add xz to "base" to allow changing the default compression format to
.tar.xz in the future
--------------------------+--------------------------------
Reporter: mojca | Owner: macports-tickets@…
Type: enhancement | Status: new
Priority: Normal | Milestone:
Component: base | Version: 2.3.4
Resolution: | Keywords:
Port: |
--------------------------+--------------------------------
Comment (by ryandesign):
I don't think it's helpful to remind us of the xz-utils backdoor here.
Yes, a possibly state-sponsored actor spend years infiltrating the xz-
utils project to insert a sophisticated backdoor—which never worked on
macOS, by the way, and so would not have affected us had we started using
xz to compress our archives, and has never affected us even though many
ports use xz-compressed distfiles. Could that actor have targeted macOS if
they wanted to? Sure. If they hadn't had success with xz-utils could they
have targeted bzip2, zlib, zstd, or any other compression method we might
choose to use? Sure. Does that mean we should avoid using all software
just because it could at some point in the future be compromised by
someone with a government's amount of resources?
The more general goal of this ticket, per its first line, is to enhance
MacPorts base so that we could compress archives better. xz files are one
way to reach that goal. xz files use the lzma algorithm. There are other
containers using that algorithm, like lz (lzip) and 7z (7zip). And there
are other compression algorithms that might be worth consideration, like
zstd. The advantage of xz is that the capability to decompress xz files is
already built into OS X 10.9 and later—using libarchive, not xz-utils.
--
Ticket URL: <https://trac.macports.org/ticket/52000#comment:17>
MacPorts <https://www.macports.org/>
Ports system for macOS
More information about the macports-tickets
mailing list