(fedora) Re: nvidia kernel driver

Paul Howarth paul at city-fan.org
Fri Feb 11 13:35:15 UTC 2005


Johnathan Bailes wrote:
> Well, you don't necessarily have to replace your yum.conf you can just
> add the following lines:
> 
> [livna-stable]
> name=Livna.org - Fedora Compatible Packages (stable)
> baseurl=http://rpm.livna.org/fedora/$releasever/$basearch/RPMS.stable
>   http://livna.cat.pdx.edu/fedora/$releasever/$basearch/RPMS.stable
> #gpgcheck=1
> 
> [livna-unstable]
> name=Livna.org - Fedora Compatible Packages (unstable)
> baseurl=http://rpm.livna.org/fedora/$releasever/$basearch/RPMS.unstable
>   http://livna.cat.pdx.edu/fedora/$releasever/$basearch/RPMS.unstable
> #gpgcheck=1
> 
> [livna-testing]
> name=Livna.org - Fedora Compatible Packages (testing)
> baseurl=http://rpm.livna.org/fedora/$releasever/$basearch/RPMS.testing
>   http://livna.cat.pdx.edu/fedora/$releasever/$basearch/RPMS.testing
> #gpgcheck=1

Why do so many people (not just you Johnathan) recommend turning off GPG 
checks like this?

What's so hard about running:

# rpm --import http://rpm.livna.org/RPM-LIVNA-GPG-KEY

It only has to be done once...?

Given that several high-profile sites (e.g. sendmail, debian) have been 
compromised over the years and possibly trojaned packages uploaded, 
having GPG checks is a very sensible and easy to implement safeguard.

Paul.




More information about the fedora-list mailing list