Rahul Sundaram wrote: >>> the Fedora 15 version has a change that doesn't check for gpg >>> signatures for local packages by default Tim: >> That doesn't sound very wise. Rahul Sundaram: > It is configurable. It still doesn't sound very wise. Good that it's an option, but bad as a default. Perhaps we should change all the security options to off-by-default? This isn't Windows. One of the better things about Linux is how things are installed. You can check the RPM before installation, to see what it contains and where it will put it. Packages are signed, as part of the fight against tampering and forgeries, and this signing is checked. -- [tim@localhost ~]$ uname -r 2.6.27.25-78.2.56.fc9.i686 Don't send private replies to my address, the mailbox is ignored. I read messages from the public lists. -- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines