On Fri, Nov 13, 2009 at 04:26:15PM +0100, Gianni Pucciani wrote:
> Hello,
> I noticed that the package jdk-1.6.0_16-fcs.x86_64.rpm is not signed
> 
> I solved removing gpgcheck=1 from the sl.repo file which has by default:
>


I hope you restored gpgcheck=1 after installing the java rpms.

Without gpgcheck=1 evil hackers own your machines by the next morning, by hijacking
the DNS entry of your SL mirror (or by 100 other easy to do hacks).

I have been complaining about this for years, but I guess people who were
never owned by evil hackers do not take such stuff seriously.


K.O.




> [sl-base]
> name=SL 5 base
> baseurl=http://linuxsoft.cern.ch/scientific/5x/$basearch/SL
>        http://ftp.scientificlinux.org/linux/scientific/5x/$basearch/SL
>        http://ftp1.scientificlinux.org/linux/scientific/5x/$basearch/SL
> #mirrorlist=ftp://ftp.scientificlinux.org/linux/scientific/mirrorlist/sl-base-5x.txt
> enabled=1
> gpgcheck=1
> # To use priorities you must have yum-priorities installed
> priority=10
> gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-sl 
> file:///etc/pki/rpm-gpg/RPM-GPG-KEY-sl5 
> file:///etc/pki/rpm-gpg/RPM-GPG-KEY-csieh 
> file:///etc/pki/rpm-gpg/RPM-GPG-KEY-dawson 
> file:///etc/pki/rpm-gpg/RPM-GPG-KEY-jpolok 
> file:///etc/pki/rpm-gpg/RPM-GPG-KEY-cern 
> file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5
> 
> 
> Do you know why that package is not signed? I was not getting this error 
> before.
> Thanks
> 
> Regards,
> Gianni Pucciani

-- 
Konstantin Olchanski
Data Acquisition Systems: The Bytes Must Flow!
Email: olchansk-at-triumf-dot-ca
Snail mail: 4004 Wesbrook Mall, TRIUMF, Vancouver, B.C., V6T 2A3, Canada