https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=89559 https://bugzilla.fedora.us/show_bug.cgi?id=181 Downstream reference Description of problem: 1. Create alternote rpm --root and install GPG keys there. 2. As root, rpm -K a package signed by an author not within that alternate --root keyring. [root@laptop warren]# rpm --root /var/fedora/rpm -K cryptplug-0.3.15-0.fdr.2.rh90.src.rpm rpmdb: unable to join the environment error: db4 error(11) from dbenv->open: Resource temporarily unavailable error: cannot open Packages index using db3 - Resource temporarily unavailable (11) error: cannot open Packages database in /var/fedora/rpm/var/lib/rpm rpmdb: unable to join the environment error: db4 error(11) from dbenv->open: Resource temporarily unavailable error: cannot open Packages database in /var/fedora/rpm/var/lib/rpm cryptplug-0.3.15-0.fdr.2.rh90.src.rpm: (SHA1) DSA sha1 md5 (GPG) NOT OK (MISSING KEYS: GPG#6b5305f6) However it works if you disable NPTL. [root@laptop warren]# LD_ASSUME_KERNEL=2.2.5 rpm --root /var/fedora/rpm -K cryptplug-0.3.15-0.fdr.2.rh90.src.rpm cryptplug-0.3.15-0.fdr.2.rh90.src.rpm: (SHA1) DSA sha1 md5 (GPG) NOT OK (MISSING KEYS: GPG#6b5305f6) It also works if you are a non-root user. [warren@laptop warren]$ rpm --root /var/fedora/rpm/ -K cryptplug-0.3.15-0.fdr.2.rh90.src.rpm cryptplug-0.3.15-0.fdr.2.rh90.src.rpm: (SHA1) DSA sha1 md5 (GPG) NOT OK (MISSING KEYS: GPG#6b5305f6) Version-Release number of selected component (if applicable): rpm-4.2-1 kernel-2.4.20-9 glibc-2.3.2-27.9 How reproducible: Always Summary: 1. Create alternote rpm --root and install GPG keys there. 2. FAIL: As root, rpm -K a package signed by an author not within that alternate --root keyring. 3. PASS: Try the same thing with NPTL disabled. 4. PASS: Try the same thing with NPTL enabled, but non-root user. -- Warren Togami Fedora Linux Project warren@togami.com http://www.fedora.us GPG 0x54A2ACF1 3rd party packaging community for Red Hat Linux 785A 304B 08C1 F291 F54F 9A68 6BDD FE8E 54A2 ACF1
Attachment:
signature.asc
Description: This is a digitally signed message part