Le lun. 19 août 2019 à 22:25, FeRD <ferd...@gmail.com> a écrit :
>
>
>
> On Mon, Aug 19, 2019 at 4:10 PM Hans de Goede <j.w.r.dego...@gmail.com> wrote:
>>
>>
>> One more remark, /etc/yum.repos.d/rpmfusion-[non]free-rawhide.repo
>> ship with gpgcheck=0 by default, but as my testing has just verified
>> the packages there are signed, so maybe we should change that to
>> gpgcheck=1 instead, as we do for the other repos?
>
>
> Here's the weirder thing, from the currently-shipping files for F30 (I 
> downloaded the release RPMs and extracted, to ensure the config wasn't 
> locally modified):
>
> $ egrep '^(\[|gpgcheck)' rpmfusion-*.repo
> rpmfusion-free-rawhide.repo:[rpmfusion-free-rawhide]
> rpmfusion-free-rawhide.repo:gpgcheck=0
> rpmfusion-free-rawhide.repo:[rpmfusion-free-rawhide-debuginfo]
> rpmfusion-free-rawhide.repo:gpgcheck=1
> rpmfusion-free-rawhide.repo:[rpmfusion-free-rawhide-source]
> rpmfusion-free-rawhide.repo:gpgcheck=1
> rpmfusion-nonfree-rawhide.repo:[rpmfusion-nonfree-rawhide]
> rpmfusion-nonfree-rawhide.repo:gpgcheck=0
> rpmfusion-nonfree-rawhide.repo:[rpmfusion-nonfree-rawhide-debuginfo]
> rpmfusion-nonfree-rawhide.repo:gpgcheck=1
> rpmfusion-nonfree-rawhide.repo:[rpmfusion-nonfree-rawhide-source]
> rpmfusion-nonfree-rawhide.repo:gpgcheck=1
>
> ...Why would it only be off for the binary RPM repos?
Probably because nobody cared to report when it was not signed ...

-- 
-

Nicolas (kwizart)
_______________________________________________
rpmfusion-developers mailing list -- rpmfusion-developers@lists.rpmfusion.org
To unsubscribe send an email to rpmfusion-developers-le...@lists.rpmfusion.org

Reply via email to