From f8e5c1c38ef7a8813bbeaca15265f338ecdeb8aa Mon Sep 17 00:00:00 2001 From: Vratislav Podzimek Date: Wed, 25 May 2016 15:48:42 +0200 Subject: [PATCH 07/13] Disable GPG checks when installing content to the system When we are installing the SCAP content as an RPM package we are likely to be missing some GPG keys. And since there are other means how to check the content integrity and authenticity plus the fact we have already used the content for the installation phase, the GPG check can be just turned off to prevent issues like the one described in the bug. Resolves: rhbz#1263216 --- org_fedora_oscap/ks/oscap.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/org_fedora_oscap/ks/oscap.py b/org_fedora_oscap/ks/oscap.py index 83b3103..2b0fa3e 100644 --- a/org_fedora_oscap/ks/oscap.py +++ b/org_fedora_oscap/ks/oscap.py @@ -525,7 +525,7 @@ class OSCAPdata(AddonData): shutil.copy2(self.raw_preinst_content_path, target_content_dir) # and install it with yum - ret = iutil.execInSysroot("yum", ["-y", "install", + ret = iutil.execInSysroot("yum", ["-y", "--nogpg", "install", self.raw_postinst_content_path]) if ret != 0: raise common.ExtractionError("Failed to install content " -- 2.5.5