Blame SOURCES/disable_yum_gpg_1263216.patch

c5477d
From f8e5c1c38ef7a8813bbeaca15265f338ecdeb8aa Mon Sep 17 00:00:00 2001
c5477d
From: Vratislav Podzimek <vpodzime@redhat.com>
c5477d
Date: Wed, 25 May 2016 15:48:42 +0200
c5477d
Subject: [PATCH 07/13] Disable GPG checks when installing content to the
c5477d
 system
c5477d
c5477d
When we are installing the SCAP content as an RPM package we are likely to be
c5477d
missing some GPG keys. And since there are other means how to check the content
c5477d
integrity and authenticity plus the fact we have already used the content for the
c5477d
installation phase, the GPG check can be just turned off to prevent issues like
c5477d
the one described in the bug.
c5477d
c5477d
Resolves: rhbz#1263216
c5477d
---
c5477d
 org_fedora_oscap/ks/oscap.py | 2 +-
c5477d
 1 file changed, 1 insertion(+), 1 deletion(-)
c5477d
c5477d
diff --git a/org_fedora_oscap/ks/oscap.py b/org_fedora_oscap/ks/oscap.py
c5477d
index 83b3103..2b0fa3e 100644
c5477d
--- a/org_fedora_oscap/ks/oscap.py
c5477d
+++ b/org_fedora_oscap/ks/oscap.py
c5477d
@@ -525,7 +525,7 @@ class OSCAPdata(AddonData):
c5477d
             shutil.copy2(self.raw_preinst_content_path, target_content_dir)
c5477d
 
c5477d
             # and install it with yum
c5477d
-            ret = iutil.execInSysroot("yum", ["-y", "install",
c5477d
+            ret = iutil.execInSysroot("yum", ["-y", "--nogpg", "install",
c5477d
                                               self.raw_postinst_content_path])
c5477d
             if ret != 0:
c5477d
                 raise common.ExtractionError("Failed to install content "
c5477d
-- 
c5477d
2.5.5
c5477d