fedup: does not verify source

Przemek Klosowski przemek.klosowski at nist.gov
Mon Dec 17 16:27:14 UTC 2012


On 12/17/2012 01:58 AM, Adam Williamson wrote:

> fedup essentially automates doing yum distro-sync across a reboot and in
> an isolated environment, and provides an interface for hooking in any
> kind of outside-of-yum-mucking-about we might need to do (like the /usr
> move stuff). It's really just a slightly sophisticated framework to do
> what you're suggesting.
>

I don't understand---the discussion started by pointing out that fedup 
does not check signatures, then someone said that yum distro-sync does 
it properly, and you're saying that fedup just automates distro-sync.
At which point is the signature checking disabled then? and can it be 
restored?



More information about the devel mailing list