Le lun. 19 août 2019 à 22:25, FeRD <ferd...@gmail.com> a écrit : > > > > On Mon, Aug 19, 2019 at 4:10 PM Hans de Goede <j.w.r.dego...@gmail.com> wrote: >> >> >> One more remark, /etc/yum.repos.d/rpmfusion-[non]free-rawhide.repo >> ship with gpgcheck=0 by default, but as my testing has just verified >> the packages there are signed, so maybe we should change that to >> gpgcheck=1 instead, as we do for the other repos? > > > Here's the weirder thing, from the currently-shipping files for F30 (I > downloaded the release RPMs and extracted, to ensure the config wasn't > locally modified): > > $ egrep '^(\[|gpgcheck)' rpmfusion-*.repo > rpmfusion-free-rawhide.repo:[rpmfusion-free-rawhide] > rpmfusion-free-rawhide.repo:gpgcheck=0 > rpmfusion-free-rawhide.repo:[rpmfusion-free-rawhide-debuginfo] > rpmfusion-free-rawhide.repo:gpgcheck=1 > rpmfusion-free-rawhide.repo:[rpmfusion-free-rawhide-source] > rpmfusion-free-rawhide.repo:gpgcheck=1 > rpmfusion-nonfree-rawhide.repo:[rpmfusion-nonfree-rawhide] > rpmfusion-nonfree-rawhide.repo:gpgcheck=0 > rpmfusion-nonfree-rawhide.repo:[rpmfusion-nonfree-rawhide-debuginfo] > rpmfusion-nonfree-rawhide.repo:gpgcheck=1 > rpmfusion-nonfree-rawhide.repo:[rpmfusion-nonfree-rawhide-source] > rpmfusion-nonfree-rawhide.repo:gpgcheck=1 > > ...Why would it only be off for the binary RPM repos? Probably because nobody cared to report when it was not signed ...
-- - Nicolas (kwizart) _______________________________________________ rpmfusion-developers mailing list -- rpmfusion-developers@lists.rpmfusion.org To unsubscribe send an email to rpmfusion-developers-le...@lists.rpmfusion.org