Re: [OE-core] [PATCH] rpm-5.4.14: disable external key server

2015-06-26 Thread Mark Hatle
On 6/26/15 1:57 AM, rongqing...@windriver.com wrote: > From: yzhu1 > > When rpm makes header verification, rpm will send request to the > extern server, this is a potential risk. Just to explain what this is. When RPM experiences a signed package, with a signature that it does NOT know. By def

[OE-core] [PATCH] rpm-5.4.14: disable external key server

2015-06-26 Thread rongqing.li
From: yzhu1 When rpm makes header verification, rpm will send request to the extern server, this is a potential risk. Signed-off-by: yzhu1 --- .../rpm-macros.in-disable-external-key-server.patch | 21 + meta/recipes-devtools/rpm/rpm_5.4.14.bb | 1 + 2 files cha