Re: how to disable gpgcheck on command line with yum install?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Rahul Sundaram wrote:
>>> the Fedora 15 version has a change that doesn't check for gpg
>>> signatures for local packages by default

Tim:
>> That doesn't sound very wise.

Rahul Sundaram:
> It is configurable.

It still doesn't sound very wise.  Good that it's an option, but bad as
a default.  Perhaps we should change all the security options to
off-by-default?

This isn't Windows.

One of the better things about Linux is how things are installed.  You
can check the RPM before installation, to see what it contains and where
it will put it.  Packages are signed, as part of the fight against
tampering and forgeries, and this signing is checked.

-- 
[tim@localhost ~]$ uname -r
2.6.27.25-78.2.56.fc9.i686

Don't send private replies to my address, the mailbox is ignored.  I
read messages from the public lists.



-- 
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux