FC3T2 up2date - <package> is not signed with a GPG signature

William Hooper whooperhsd3 at earthlink.net
Wed Sep 29 01:35:40 UTC 2004


Matias Feliciano said:
[snip]
>
> rpm --addsign *.rpm. One time per day (for rawhide).
> I don't know if rpm can sign in batch mode.

What security will that give you?  Any hacked RPM just has to get into
rawhide for 24 hours or less and it is automatically signed...

-- 
William Hooper




More information about the fedora-test-list mailing list