SCIENTIFIC-LINUX-USERS Archives

August 2005

SCIENTIFIC-LINUX-USERS@LISTSERV.FNAL.GOV
Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
gpg signature checking
From:
gf <[log in to unmask]>
Reply To:
gf <[log in to unmask]>
Date:
Mon, 8 Aug 2005 07:39:43 -0600
Content-Type:
text/plain
Parts/Attachments:
text/plain (11 lines) 
Hi,
Would it make sense to make gpg signature checking the default for the
official distributed Scientific Linux packages? In other words,
include the line 'gpgcheck=1' in the /etc/yum.repos.d/sl*.repo files.

It seems as if this approach would help to make sure that all packages
are signed and that users don't accidentally install 'unofficial' or
(perhaps maliciously) altered packages.

-g

ATOM RSS1 RSS2