@pmatilai so here is what I would *like* to see:

1. Duplicate tags in signature headers are not allowed.
2. Signature headers are not allowed to duplicate tags found in the immutable 
header, after fixups.
3. Signatures are verified before headers are imported.
4. `rpmReadPackageFile` is deprecated, in favor of `rpmReadPackageFileEx` which 
takes a verification level argument.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/1484#issuecomment-759174330
_______________________________________________
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint

Reply via email to