folkslinux
/
CBL-Mariner
mirror of https://github.com/microsoft/CBL-Mariner.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update commment

This commit is contained in:
Tauri 2020-08-14 15:38:11 -07:00
parent 7f42e78aca
commit 00d446e81f
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
SPECS/tdnf/tdnf-use-custom-keyring-for-gpg-checks.patch
View File

@ -14,7 +14,7 @@ index d776d30..ca90fa7 100644
+ // If not checking gpg sigs, ignore signature errors.
+ //
+ // If checking GPG signatures, ignore signatures errors.
+ // These errors can be ignored safely as the gpg signatures have already been validated on file
+ // These errors can be ignored safely as the gpg signatures have already been validated for the file
+ // in the above `TDNFGPGCheck` call. If an RPM with an invalid signature is provided,
+ // the code will never reach this point.
+ // TDNF's gpg keyring is a superset of RPM's built in one, and any gpg files provided in the repo config.