From f8e5c1c38ef7a8813bbeaca15265f338ecdeb8aa Mon Sep 17 00:00:00 2001
From: Vratislav Podzimek <vpodzime@redhat.com>
Date: Wed, 25 May 2016 15:48:42 +0200
Subject: [PATCH 07/13] Disable GPG checks when installing content to the
 system

When we are installing the SCAP content as an RPM package we are likely to be
missing some GPG keys. And since there are other means how to check the content
integrity and authenticity plus the fact we have already used the content for the
installation phase, the GPG check can be just turned off to prevent issues like
the one described in the bug.

Resolves: rhbz#1263216
---
 org_fedora_oscap/ks/oscap.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/org_fedora_oscap/ks/oscap.py b/org_fedora_oscap/ks/oscap.py
index 83b3103..2b0fa3e 100644
--- a/org_fedora_oscap/ks/oscap.py
+++ b/org_fedora_oscap/ks/oscap.py
@@ -525,7 +525,7 @@ class OSCAPdata(AddonData):
             shutil.copy2(self.raw_preinst_content_path, target_content_dir)
 
             # and install it with yum
-            ret = iutil.execInSysroot("yum", ["-y", "install",
+            ret = iutil.execInSysroot("yum", ["-y", "--nogpg", "install",
                                               self.raw_postinst_content_path])
             if ret != 0:
                 raise common.ExtractionError("Failed to install content "
-- 
2.5.5