[packagekit] Signed packages again again

[David Zeuthen]

On Thu, 2007-11-15 at 22:44 +0000, Richard Hughes wrote:
> > Probably yum legends can comment on how hard this is to check?
> 
> Well, we have to check all the things it depends on; for instance if we
> have to install an unsigned package as a dep to a signed package is that
> unsigned or signed?

I think if just one of the packages that is part of the transaction is
untrusted, the whole transaction would be untrusted, yes?

     David