SCIENTIFIC-LINUX-USERS Archives

May 2007

SCIENTIFIC-LINUX-USERS@LISTSERV.FNAL.GOV
Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
Re: suggested verification steps for yum update of security tools
From:
Troy Dawson <[log in to unmask]>
Reply To:
Troy Dawson <[log in to unmask]>
Date:
Mon, 21 May 2007 12:29:20 -0500
Content-Type:
text/plain
Parts/Attachments:
text/plain (19 lines) 
Jon Peatfield wrote:
...
> 
> I'm now puzzling over why the default seems to be to ship with all the 
> yum.repos.d/ entries having gpgcheck=0 surely the extra work of doing a 
> sig-check isn't so great is it?

It's because java wasn't ever signed.  In the past, we couldn't sign it 
without breaking it, so whenever that was turned on, it would yell and 
scream, and people couldn't update any package.
With a new gnupg, we are now able to sign the java packages, so it's now 
a possiblity.  We'll look into it in the next release.
Troy
-- 
__________________________________________________
Troy Dawson  [log in to unmask]  (630)840-6468
Fermilab  ComputingDivision/LCSI/CSI DSS Group
__________________________________________________

ATOM RSS1 RSS2